Privacy Policy

Last updated: April 22, 2026

The short version: Quick Notes is a local-first Chrome extension. By default, all your data stays on your device. The extension makes zero network requests. Optional Google Drive sync is opt-in and uses a minimum-privilege scope (drive.appdata) that cannot access your other Drive files.

What data the extension handles

Quick Notes handles the following data only on your local device, never on a remote server owned by the developer:

Notes content — the text, images, and formatting you type into notes.
History — records of paste / selection / URL-capture operations you trigger (capped at 200 entries).
Settings — your configured themes, URL-pattern rules, per-site default notes, panel opacity, and shape preferences.
Pasted page content — if you click the "Paste clipboard," "Insert URL," or "Insert selection" buttons, the content goes into your active note.

Storage is in Chrome's sandboxed chrome.storage.local API, local to your browser profile.

What the extension does NOT do

Does not collect, transmit, or share notes with the developer, analytics services, advertisers, or any third party.
Does not contain tracking, telemetry, or remote logging.
Does not read page content automatically. Page content is captured only when you click a capture button.
Makes no network requests at all, unless you opt into Google Drive sync.

Optional: Google Drive sync

If you explicitly enable Drive sync in the options page:

You grant the extension the https://www.googleapis.com/auth/drive.appdata scope only. This scope allows reading and writing files in a hidden per-app folder (the "appDataFolder") in your Google Drive.
This folder is not visible in your regular Drive UI and cannot be accessed by any other application.
The extension cannot see, read, or modify your other Drive files. The drive.appdata scope is specifically sandboxed.
Your notes, images, and settings are packaged as a single JSON file and uploaded to this private folder, then downloaded when syncing from another device.
Sync frequency is configurable (manual, or every 5/15/30/60 min). You can sign out at any time.

No other Google APIs or services are contacted.

Third-party services

Quick Notes uses exactly one optional third-party service:

Google Drive (only when sync is enabled). Its own privacy policy applies: policies.google.com/privacy.

No other third parties are involved.

Permissions explained

Permission	Why
`storage`	Save notes and settings in `chrome.storage.local`.
`scripting`	Inject the floating panel into the active tab on user command.
`clipboardRead`	The Paste button reads the clipboard — only when you click it.
`contextMenus`	Right-click menu entries for sending selected text / URLs to notes.
`identity`	Google sign-in (only if you enable Drive sync).
`alarms`	Schedule periodic auto-sync to Drive (only if enabled).
`<all_urls>`	So the floating panel can appear on any page. No page content is read unless you click Insert URL or Insert Selection.

Exporting and deleting your data

Export

At any time, export all your local data as a JSON file via the options page's Backup & Restore section. This file is saved via your browser's normal download flow — the extension does not upload it anywhere.

Delete (local)

Options page → Storage → "Reset everything." Or uninstall the extension.

Delete (Google Drive, if sync was enabled)

Options → Google Drive sync → Sign out. Then visit myaccount.google.com/permissions, find Quick Notes, and revoke access.

Children's privacy

Quick Notes is not directed at children under 13.

Changes to this policy

If this policy changes, the new version will be committed to the public repository at github.com/quicknotes/quick-notes/blob/main/PRIVACY.md with a new "Last updated" date, and this page will be updated accordingly.

Contact

Open an issue at github.com/quicknotes/quick-notes/issues.