How Web Memo collects, uses, retains, and shares your data.
Effective date
August 19, 2026
Last updated
September 24, 2026
Summary
·We store only the notes and highlights you explicitly save, along with the address and title of the page they came from.
·Only the information needed for an AI feature or note category suggestion is sent to OpenAI or TypeSafe AI.
·The extension does not collect or store your general browsing history.
·We never sell your data and never use it for advertising.
1. Scope
This policy applies to the Web Memo Chrome extension, the Web Memo iOS app, and the website at https://webmemo.xyz, referred to together as the "Service".
By using the Service you agree to the data practices described here. If you do not agree, you may stop using the Service and remove the extension at any time.
2. Data we collect
Web Memo collects the categories of data listed below. For each category we state exactly when it is collected and what it contains.
a. Account information
Collected when you sign in with your Google account, and used for authentication and syncing your data across devices.
·Email address
·Name and profile image
·A unique user identifier issued by the Service
·Nickname and note-sharing preference, if you set them
b. Content you save
Collected only at the moment you press save or create a highlight. We do not collect information about pages you did not save.
·Note text, impressions, and action items you type
·The URL, page title, and favicon address of the page you saved a note or highlight from
·The highlighted sentence plus the surrounding text and position values needed to restore the highlight later
·Highlight color and any note attached to a highlight
·Category names and colors you create, and starred / reading / wishlist flags
c. Web page and note content (only when you use an AI feature)
When you run AI summarization or question answering, page text is sent through our server to OpenAI. When you write or edit a note in the side panel, its title, URL, content, and existing category list may be sent to TypeSafe AI to suggest a category. If further classification is needed, this information and up to the first 2,000 characters of page text are sent to OpenAI. The transmitted content is processed for the suggestion and is not separately stored in our database.
·The body text and title of the page you are currently viewing
·The questions you type and the conversation history in the AI chat feature
·Note titles and bodies sent for automatic category classification
d. Usage data
Collected through Google Analytics to understand how features are used and to improve the Service.
·Names of feature events and their parameters
·Pages visited, page titles, and time spent
·Browser type and version, operating system, device type, and approximate region
·IP address (processed under Google Analytics policy, and also used to rate-limit API requests)
·A unique user identifier used to associate events with your account
e. Diagnostic data
Collected through Sentry to identify and fix errors. This includes session replay, which records how you interact with the Service screen.
·Error messages, stack traces, and the screen path where the error occurred
·Browser, operating system, device details, and performance measurements
·Session replay: a record of clicks, inputs, and navigation within the Service (approximately 10% of all sessions, and 100% of sessions where an error occurs)
·A unique user identifier and email address used to associate errors with your account
f. Support and feedback data
Collected only when you submit feedback or answer the uninstall survey yourself.
·The feedback text you write
·The removal reason and comment you choose to submit after uninstalling
·An email address you optionally provide so we can reply
g. Data stored only on your device
The following is kept in your browser storage and is never transmitted to us.
·Your preferences such as language, theme, and side panel visibility
·Authentication tokens that keep you signed in
·Login cookies for the Web Memo domain (webmemo.xyz), read solely to carry your website sign-in into the extension. We never access cookies belonging to any other website.
3. Data we do not collect
Web Memo does not collect any of the following.
·Your password. Sign-in is handled entirely by Google, and we never store passwords.
·Payment information such as credit card numbers. The Service is free and processes no payments.
·The content of pages where you neither saved a note or highlight nor ran an AI feature.
·Your general browsing history or search history.
·Government identification numbers, health information, political opinions, or other sensitive categories of data.
4. How we use your data
We use collected data only for the purposes below, and delete it once those purposes are fulfilled.
·Authenticating you and syncing notes and highlights across your devices
·Letting you view, search, organize, and restore the notes and highlights you saved
·Providing AI summarization, AI question answering, and automatic category suggestion
·Diagnosing errors and improving the stability of the Service
·Analyzing feature usage in order to improve the Service
·Responding to your inquiries and sending service announcements
·Preventing abnormal use and API abuse
·Sending service guidance emails, such as the sign-up welcome email
5. Extension permissions and why we need them
The Web Memo Chrome extension requests the following permissions for the stated reasons.
Permission
Why it is needed
storage
Saves your sign-in state and preferences such as language and theme in your browser.
tabs
Reads the address and title of the current tab so they can be attached to the note you are saving.
sidePanel
Displays the note-taking interface in the browser's side panel.
contextMenus
Adds right-click menu actions for highlighting selected text or saving it as a note.
cookies
Reads authentication cookies for the Web Memo domain (webmemo.xyz) only, so that your website sign-in carries over to the extension. Cookies belonging to any other website are never accessed.
Access to all sites (<all_urls>)
Required so you can save notes and display or restore highlights on any website. Page content is read only at the moment you save it or actively run an AI feature; we never automatically collect or transmit the pages you visit.
6. Third parties we share data with
We engage the service providers listed below to operate the Service. We do not share user data with any third party outside this list.
Beyond this list, data may be disclosed only in response to a lawful request from authorities under applicable law, or where you have given separate consent.
Recipient
Purpose
Data shared
Privacy policy
Supabase, Inc.
Authentication and database hosting
Account information, saved notes, highlights, categories, and feedback content
Web Memo's use of user data complies with the Limited Use requirements of the Chrome Web Store User Data Policy. Specifically, we affirm the following.
·We do not sell user data.
·We do not use or transfer user data for any advertising purpose, including personalized advertising.
·We do not use user data for creditworthiness or lending purposes, and we do not transfer it to data brokers.
·We do not use user data for any purpose other than providing the features described in this policy.
·No human, including the operator, reads user data. The only exceptions are where you have given explicit consent, where it is necessary for security purposes, where it is required to comply with applicable law, or where the data has been aggregated and anonymized so that no individual can be identified.
8. Retention and deletion
Retention periods differ by data category, as follows.
·Notes, highlights, and categories you saved: retained until you delete them yourself or request account deletion.
·Account information: retained while your account exists, and deleted together with related data when you request account deletion.
·Page content and conversations sent to AI features: not stored in our database after the response is generated. Retention on OpenAI's side is governed by OpenAI's own policy.
·Content sent to TypeSafe AI for category suggestions: not separately stored in our database. TypeSafe AI's data processing addendum states that it retains data for as long as necessary for the processing purpose and applicable law; it does not specify a fixed number of days.
·Usage data (Google Analytics): automatically deleted no later than 14 months after collection.
·Diagnostic data and session replays (Sentry): automatically deleted no later than 90 days after collection.
·Support and feedback data: deleted once the inquiry is resolved and the service improvement purpose is fulfilled.
·Where applicable law requires retention, data is stored separately for the required period and then destroyed.
9. Your rights and how to exercise them
You have the following rights regarding your data and may exercise them at any time.
For the notes and highlights you saved, you can view, edit, and delete them directly inside the Service. To delete your account and all associated data, contact us using the details below; we will complete the request and reply within 30 days.
·Request access to, and a copy of, the data we hold about you
·Correct inaccurate data
·Delete individual notes and highlights (available directly in the Service)
·Request deletion of your account and all associated data
·Stop all collection by removing the extension
·Opt out of Google Analytics by installing the browser opt-out add-on or removing the extension
10. Data security
We apply the following measures to protect your data.
·All data in transit is encrypted with HTTPS/TLS.
·Row Level Security is enforced in the database so that you can access only your own data.
·Authentication is handled exclusively through Google OAuth, and we store no passwords.
·API requests are rate-limited to block abnormal access and abuse.
11. International transfers
Some of the service providers we use operate servers outside the Republic of Korea. As a result, your data may be transferred to, stored in, and processed in the United States and other countries. The destination country, the categories of data transferred, and the purpose for each provider are described in that provider's privacy policy, linked in the third-party table above.
12. Children's privacy
Web Memo is not directed to children under 14, and we do not knowingly collect personal data from children under 14. If we learn that such data has been collected, we delete it without delay. If you are a parent or guardian and believe this has occurred, please contact us using the details below.
13. Changes to this policy
If this policy changes, we will post the revised version on this page and update the last-updated date. For changes that materially affect your rights, such as adding a new category of collected data or changing the purpose of processing, we will provide notice in the Service or by email at least 7 days before the change takes effect.
14. Contact
For questions about this policy, or to request access to or deletion of your data, please contact us.