Privacy Policy for StackUp

Effective Date: August 1, 2026

Last Updated: August 1, 2026

Product: StackUp Chrome Extension ("StackUp", "we", "us", or "our")

Developer Website: https://www.manikandanramar.com/projects/stack-up

Contact: support@manikandanramar.com

1. Overview & Core Privacy Principles

At StackUp, privacy is not an afterthought—it is a core feature. StackUp operates on a local-first and privacy-by-design architecture.

  • No Remote Trackers or Analytics: We do not collect, monitor, track, or sell your personal data, browsing history, or workspace activity.
  • Local Data Storage: All of your shortcuts, custom stacks, notes, search indexes, and layout preferences remain stored locally on your device inside your browser.
  • Zero Third-Party Data Transmission: Your workspace data is never sent to or stored on any external servers operated by us or third-party advertisers.

2. Information We Collect and Process

StackUp accesses only the minimum necessary data to provide its core workspace features:

A. Local Workspace Data (User-Created)

What Data: Web shortcuts (URLs, titles, custom names), quick notes, custom column stack layouts, theme preferences, and cached website favicon data URLs.

How It Is Stored: Stored locally on your device using Chrome's native chrome.storage.local and chrome.storage.sync APIs.

Purpose: To persist your custom start page workspace across browser sessions.

B. Open Tabs & Browsing History (On-Demand Search)

What Data: Active browser tab titles, open tab URLs, and recent browsing history.

How It Is Handled: Read strictly in-memory and locally on device when you trigger the universal quick search bar (/ key).

Purpose: To enable instant local searching across open tabs, saved links, and browser history. This data is never logged, saved to disk, or transmitted outside your browser.

C. Context Menu Selection Data

What Data: Page URLs or link target URLs that you explicitly right-click to select "Add to StackUp".

How It Is Handled: Passed temporarily via chrome.storage.session to the popup interface.

Purpose: To populate the bookmark creation modal when adding links from external sites.

D. Favicon Fetching

What Data: Public domain names of saved website shortcuts.

How It Works: To display clean visual icons for your shortcuts, StackUp fetches public favicons from standard provider endpoints (e.g., google.com/s2/favicons, logo.clearbit.com, icons.duckduckgo.com).

Privacy Assurance: No personal identifiers, cookies, or user account information are included in these icon requests.

3. Google Drive Cloud Sync (Optional Feature)

StackUp offers an optional cloud backup and sync feature powered by Google Drive.

  • OAuth2 Authentication: If you explicitly choose to connect Google Drive sync, StackUp uses Chrome's official chrome.identity API to authenticate with your Google account.
  • Scope Requested: https://www.googleapis.com/auth/drive.appdata (Restricted Application Data folder).
  • What This Means: StackUp only accesses its own isolated configuration file (stackup-sync.json) stored inside your personal Google Drive's hidden appDataFolder.
  • Data Isolation: StackUp CANNOT read, modify, view, or access any other files or documents stored in your Google Drive.
  • Direct Connection: Sync operations happen directly between your Chrome browser and Google's official Drive APIs (www.googleapis.com). Data does not pass through any intermediate server.

4. Chrome Extension Permissions Justification

In compliance with the Chrome Web Store Developer Program Policies, here is why each requested permission is required:

PermissionPurpose & Justification
storageRequired to save your custom workspace stacks, shortcuts, notes, and preferences locally in the browser.
tabsRequired to query open browser tabs for the / quick search launcher and to read active tab URLs when adding shortcuts.
historyRequired to search recent browser history strictly inside the local / quick search launcher.
contextMenusRequired to add the right-click "Add to StackUp" menu option on web pages and links.
identityRequired for optional Google Drive OAuth2 sign-in to back up workspace data to your private Google Drive account.
host_permissionsRequired to fetch public website icons/favicons for saved shortcuts.

5. Third-Party Services & Data Sharing

  • No Data Sales: We do not sell, rent, monetize, or trade your personal data to advertisers, data brokers, or commercial entities under any circumstances.
  • No Analytics Providers: We do not integrate third-party analytics SDKs (such as Google Analytics, Mixpanel, or PostHog) inside the extension.
  • Google Services: If Google Drive sync is enabled, data interaction is governed by Google's Privacy Policy.

6. Data Retention, Control, and Deletion

  • Full User Control: You own 100% of your workspace data.
  • Export & Backup: You can export or import your workspace configuration at any time from the StackUp settings menu.
  • Complete Data Removal: Uninstalling the StackUp Chrome Extension immediately purges all local storage and settings created by the extension from your browser.
  • Disconnecting Cloud Sync: You can revoke Google Drive access at any time via your browser options page or by visiting your Google Account Permissions Manager.

7. Compliance with Children's Privacy (COPPA & GDPR)

StackUp does not knowingly collect or solicit personal information from children under the age of 13. Because the extension operates entirely locally without user registration or remote servers, no children's data is gathered or stored.

8. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect improvements in feature functionality or changes to Chrome Web Store compliance guidelines. The revised policy will always be posted at this URL with an updated "Last Updated" date.

9. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or your data privacy while using StackUp, please reach out to us: