Privacy Policy
Last updated: May 2026 · Version 1.0.0
1. Introduction
This Privacy Policy describes how MarkSnap (the "Extension"), developed by MIE, collects, uses, stores, and protects your information. This policy applies specifically to the MarkSnap browser extension and is separate from the ExtensionShop marketplace privacy policy.
We are committed to protecting your privacy. By installing and using MarkSnap, you agree to the data practices described in this policy.
2. Information We Collect
MarkSnap collects the minimum data necessary to provide its functionality. Below is a complete breakdown of what data is and is not collected.
Data Collected
| Data Type | Description | Required |
|---|---|---|
| Bookmarks (timestamp, note, page URL, page title) | Every time you save a bookmark, the timestamp, your optional note, the page URL, and the page title are stored locally in chrome.storage. Pro users also have this synced across their own devices via Chrome's built-in sync. Bookmark data is never sent to MarkSnap's servers. | Required |
| License key (Pro only) | If you purchase Pro, your LemonSqueezy license key is stored locally and sent to LemonSqueezy's API only to activate, validate, or deactivate it. The key alone is sent — never any bookmark content or browsing data. | Optional |
| User preferences | Theme choice (light/dark/system) and interface mode (popup/side panel) are stored locally. Never transmitted. | Required |
| Anonymous usage events | Aggregated events such as "extension installed", "popup opened", and "bookmark saved" are sent to Google Analytics. No URLs, no bookmark content, no personal identifiers. Used to understand which features and platforms users actually use. | Required |
Data Not Collected
MarkSnap does not collect the following types of information:
- Video content, audio content, or transcripts of any kind
- Browsing history outside the six supported platforms
- Usernames, accounts, email addresses, or any personal identifiers
- Cookies, authentication tokens, or session data
3. How We Use Your Information
Collected data is used exclusively for the following purposes:
- Providing and maintaining the core functionality of MarkSnap
- Saving your preferences and settings for a personalized experience
- Improving the extension through anonymous usage analytics (when you opt in)
- Diagnosing and fixing bugs or technical issues
We do not use your data for advertising, user profiling, or any purpose unrelated to the functionality of MarkSnap.
4. Data Storage and Security
MarkSnap stores data locally in your browser using the browser's built-in storage APIs (chrome.storage / localStorage). Data remains on your device and is not transmitted to external servers unless explicitly stated.
Data retention: Bookmarks persist in chrome.storage until you delete them manually (per-bookmark or "Delete all" in Settings). Uninstalling the extension removes all local storage automatically. The Pro license key is removed when you deactivate it or uninstall. No data is retained on any MarkSnap server — there is no MarkSnap server.
5. Third-Party Data Sharing
MarkSnap sends data to two external services only: (1) LemonSqueezy — receives only the Pro license key string when activating/validating/deactivating; never receives bookmarks, page content, or personal data. (2) Google Analytics — receives anonymous aggregated usage events (install, popup open, bookmark saved); never receives URLs, page content, or personal identifiers. All bookmark data stays on your device.
We do not sell, rent, or trade your personal information to any third party for their marketing or commercial purposes.
6. Browser Permissions
MarkSnap requests the following browser permissions. Each permission is required for specific functionality and is used only for its stated purpose:
| Permission | Purpose |
|---|---|
| Active Tab | Reads the URL and tab state of the currently active browser tab when the user presses Alt+B or uses the right-click context menu, so MarkSnap can detect which platform is active and send the save command to the correct tab. |
| Storage | Stores all bookmarks (timestamps, notes, collections) locally on the user's device using chrome.storage.local. Pro users also sync bookmarks across devices via chrome.storage.sync. Also stores user preferences (theme, popup vs side-panel mode) and the Pro license key. |
| Scripting | Used once at install/update time to inject the content script into tabs that were already open before the extension was installed. Without this, the extension would not work on pages loaded before installation. Scoped to the six supported platforms. |
| Context Menus | Adds a "⧗ Save timestamp (MarkSnap)" right-click menu item on supported pages, giving users a mouse-based alternative to the Alt+B keyboard shortcut. |
| Commands | Registers the Alt+B keyboard shortcut that triggers the timestamp save overlay. Declared in the manifest and handled by the service worker. |
| Tabs | Queries the active tab's URL to detect the current platform, navigates to bookmarked timestamps when "Jump" is clicked in the Library, finds already-open tabs on a platform to send seek commands to, and opens the welcome page on install. |
| Alarms | Schedules a recurring 24-hour background alarm that re-validates Pro license keys with LemonSqueezy so expired or revoked licenses are detected automatically. |
| Side Panel | Required to open and manage Chrome's built-in Side Panel when the user switches MarkSnap to "Side Panel" mode in Settings. |
| Host Access (youtube.com, music.youtube.com) | The content script injects on YouTube watch pages and Shorts to read the video element's playback position and inject visual timestamp markers on the player's progress bar. |
| Host Access (udemy.com) | Required for the content script to read playback position and inject markers on Udemy's Shaka-based course player. |
| Host Access (vimeo.com) | Required for the content script to read playback position and inject markers on Vimeo's HTML5 player. |
| Host Access (open.spotify.com) | Required for the content script to read playback position and inject markers on the Spotify Web Player. Scoped to the entire domain because Spotify's player persists across all pages in the SPA, regardless of URL. |
| Host Access (pocketcasts.com) | Required for the content script to read audio playback position and inject markers on Pocket Casts Web's seek bar. |
| Host Access (podcasts.apple.com) | Required for the content script to pierce Apple Podcasts' nested Shadow DOM, read playback position, and inject markers on the player's progress bar. |
| Host Access (api.lemonsqueezy.com) | Required for Pro plan license management. The service worker calls LemonSqueezy to activate, validate, and deactivate license keys. Only the license key string is sent — no user data or bookmark content. |
| Host Access (google-analytics.com) | Sends anonymous, aggregated usage events (extension installed, popup opened, bookmark saved) to help prioritize which features and platforms to improve. No personally identifiable information is ever transmitted. |
No permissions are used to collect data beyond what is described in Section 2 of this policy. We follow the principle of least privilege and only request permissions essential for the extension's functionality.
7. Your Rights
You have the following rights regarding your data:
- Access: You can view all data stored by the extension through your browser's extension storage inspector
- Deletion: You can delete all stored data by uninstalling the extension or clearing extension data in your browser settings
- Opt-out: Optional data collection (such as analytics) can be disabled in the extension settings
- Portability: You may export your data where the extension provides export functionality
- Complaint: You have the right to lodge a complaint with a data protection authority if you believe your rights have been violated
For users in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to rectification, restriction of processing, and the right to object. To exercise these rights, contact us using the information below.
8. Children's Privacy
MarkSnap is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the extension's functionality or applicable regulations. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will provide notice through the extension's update notes or a notification within the extension itself.
Your continued use of MarkSnap after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the data practices of MarkSnap, please contact us:
Developer: MIE
Email: iliasselbarhoumi@gmail.com