Privacy Policy — Website Feedback Tool
Last updated: 5 August 2026
The short version
- Website Feedback Tool ("the extension", "we", "us") lets you place comment pins on any web page and share a snapshot of it with others.
- Your comments and settings stay on your own device. There is no account and no sign-up.
- Data leaves your browser only when you click "Save & Share". At that point we upload a frozen copy (snapshot) of the page you annotated, together with your comments, so we can host a shareable link.
- A snapshot can capture whatever is on the page at that moment — including any personal or confidential information visible to you. Anyone who has the link can view it. Shared snapshots are deleted automatically after 90 days.
- We do not sell your data, show ads, or track your browsing. The extension contains no advertising or third-party tracking.
1. What the extension stores on your device
The following is kept locally in your browser (Chrome's storage area) and is never sent to our servers:
| Data | Purpose | Retention |
|---|---|---|
| Comments & pins | Your annotations, tied to the page URL, so they reappear when you return to the page | Auto-deleted after 30 days |
| Share history | Links to snapshots you created (review link, source page URL and title, comment count) so the popup can list them | Auto-expires after 90 days |
| Usage counters | A local count of how many times you've shared and when you last shared | Until you clear it or uninstall |
| Settings | The backend server address the extension talks to | Until changed or uninstalled |
Settings are stored in Chrome's synced storage, so if you are signed into Chrome they may sync across your own devices through your Google account. Comments, history and usage counters are stored only on the current device.
2. What we receive when you click "Save & Share"
Sharing is always an explicit, deliberate action. When you click Save & Share, the extension builds a snapshot of the current page and sends it to our server so we can host it at a shareable link. The snapshot includes:
- A frozen HTML copy of the page's content as it appeared to you, including images and — where a page uses canvas/WebGL graphics — a screenshot or image capture of that visible content;
- The comment text you wrote and the position of each pin;
- The URL and title of the page you annotated.
We store this snapshot in our database purely to serve it back at its shareable link. We do not add it to any profile about you, and we do not use it for advertising or analytics.
Important — you decide what goes into a snapshot. A snapshot captures the page exactly as it looked to you. If the page showed personal data, account details, private messages, or other confidential information, that content will be included in the snapshot and visible to anyone you share the link with. Only annotate and share pages whose content you are comfortable uploading, and do not share pages that contain other people's personal data or information you are not permitted to disclose.
Who can see a shared snapshot
Each snapshot gets a long, randomly generated, hard-to-guess link. There is no password protection: anyone who has the link can open the snapshot. Treat share links like unlisted URLs — share them only with people you intend to.
How long we keep it
Shared snapshots are automatically and permanently deleted 90 days after they are created. You can also ask us to delete a specific snapshot sooner (see "Your choices" below).
3. Server logs
Like virtually all web services, our server and the hosting/CDN infrastructure in front of it automatically record standard technical request information — such as your IP address, the date and time, the requested URL, and your browser's user-agent string. These logs are used only to operate the service, keep it secure, and prevent abuse. We do not use them to build advertising or behavioural profiles.
4. Analytics on our website (not in the extension)
The onboarding welcome and changelog pages that we host on our website use two analytics tools to count visits and understand which pages are viewed:
- Umami — a privacy-focused, cookie-light analytics service;
- Google Analytics — provided by Google.
These run only on those hosted web pages. They are not part of the extension itself and do not run on the pages you visit or annotate in your browser. You can block them with any standard content/ad blocker or the Google Analytics opt-out add-on.
5. Uninstall feedback
If you remove the extension, Chrome may open an optional feedback form (hosted on Google Forms) asking why you left. Completing it is entirely voluntary; any answers you provide are governed by Google's privacy terms.
6. Service providers we rely on
We keep third parties to a minimum. The ones that may process data on our behalf are:
- Our hosting / server provider and CDN — store the snapshot database and process request logs;
- Umami and Google (Analytics) — page-view statistics on our website pages only, as described above;
- Google (Forms) — the optional uninstall feedback form.
We do not sell, rent, or trade your information, and we do not share it with advertisers.
7. Your choices and rights
- Delete local data: discard comments from within the extension at any time, or remove all stored data by uninstalling the extension or clearing the site/extension data in Chrome.
- Delete a shared snapshot: email us the review link and we will remove it. In any case every snapshot is deleted automatically after 90 days.
- Access / questions: because we hold no account and no profile about you, the only personal data we may hold is what happens to be inside a snapshot you chose to share, plus transient server logs. Contact us to ask about or request deletion of that data.
- Opt out of website analytics: use a content blocker or Google's opt-out add-on when visiting our web pages.
If you are in the EEA, UK, or a similar jurisdiction, you may have additional rights (access, correction, erasure, objection) under laws such as the GDPR, and the right to complain to your local data protection authority.
8. Extension permissions
Chrome asks you to grant the extension certain permissions. Here is why each is needed:
| Permission | Why |
|---|---|
| Access to all websites | So you can place comment pins on any page, capture a screenshot of the page when sharing, and load the page's own stylesheets into the snapshot |
| Tabs | To open the review, welcome and changelog pages, and to message the current page |
| Storage | To save your comments and settings locally (as described in section 1) |
| Alarms | To run the daily cleanup that deletes comments older than 30 days |
9. Children
The extension is a general-purpose productivity tool and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has shared personal information through the service, contact us and we will delete it.
10. Security
We use reasonable technical measures to protect the service, including serving all traffic over HTTPS and isolating shared snapshots on a separate sandbox domain so they cannot access our main site's data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy as the extension evolves. When we do, we will revise the "Last updated" date above and post the new version here. Significant changes will be highlighted where practical.
12. Contact
Questions about this policy or your data? Email us at privacy@website-feedback-tool.com.