🛡️ Privacy Policy
This Privacy Policy applies to the FlashNote browser extension (hereinafter referred to as “the Extension” or “Application”). We deeply value the confidentiality of your notes and writings, adhering strictly to our core philosophy: “Local-first, user data ownership, and zero stealth tracking.”
🏗️ 1. Data Architecture & Local-First Philosophy
🏠 A. 100% Local Sandbox Storage
- All your notes, book chapters, folder hierarchies, and preferences are strictly stored in your browser’s local sandbox via IndexedDB (Dexie.js).
- Under default operation, no data is transmitted to intermediate servers or third-party clouds. Your data belongs entirely to you.
🗄️ B. High-Performance Local Asset Sandbox (OPFS)
- High-resolution images and multimedia assets are stored directly in the Origin Private File System (OPFS), co-located with your notes locally.
- Deleting notes cascades physical deletion of associated local assets, preventing orphaned clutter.
☁️ C. User-Owned Cloud Sync
- When you optionally enable cloud synchronization (e.g., Baidu Netdisk), the Extension communicates directly with your private cloud directory (
/apps/flashnote/) via official OAuth authorization. - Neither the developer nor intermediate proxies can view, intercept, or store your tokens or documents.
🤖 D. AI Services & On-Device Privacy
- On-Device Built-In AI: Supports Chrome Built-in Gemini Nano (Prompt API), executing 100% locally and offline without data leaving your device.
- Direct Cloud LLMs: When connecting Google Gemini API or OpenAI-compatible endpoints, requests travel directly from your browser to official provider APIs without intermediate servers. API keys remain encrypted in local storage.
🔐 2. Browser Permissions (Principle of Least Privilege)
FlashNote only requests permissions essential for core workspace and clipping features:
| Permission | Purpose & Scope |
|---|---|
storage & unlimitedStorage | Overcomes default quota limits to reliably store extensive notes, long books, and search indexes locally. |
sidePanel | Provides a native, persistent sidebar workspace to prevent distraction from frequent tab switching. |
contextMenus | Allows users to quickly capture page body, selected text, links, or images directly into FlashNote via right-click. |
activeTab & tabs | Reads the active tab’s title and URL strictly when the user triggers web clipping or citations, and redirects to notes. |
clipboardWrite | Enables one-click copying of Markdown text, syntax-highlighted code blocks, and exported Mermaid diagrams to the system clipboard. |
notifications | Dispatches subtle desktop notifications when web clipping succeeds or cloud sync completes. |
scripting & <all_urls> | Extracts article text and renders a sleek, lightweight feedback toast (Web Toast) in the upper-right corner of clipped web pages. |
📊 3. Privacy Protection & Anonymous Product Analytics
- No Commercial Ads: FlashNote contains zero third-party advertising SDKs or sponsored promotions.
- Zero Content Sniffing & No Keystroke Logging: We never monitor keystrokes, nor do we read, inspect, or store your note bodies, book chapters, search terms, or personally identifiable information (Non-PII).
- Google Analytics 4 Anonymous Telemetry:
- To monitor runtime health, cold-start latency, and feature adoption frequency (e.g., toolbar actions, view mode switching) to continuously improve product experience, FlashNote integrates Google Analytics 4 Measurement Protocol;
- 100% Anonymized & Aggregated: Data is bucketed into anonymized intervals (e.g., cold-start latency ranges, search duration buckets, UI language preferences). No personal data or document content is ever transmitted;
- Complete User Control (Opt-Out): You can disable anonymous analytics anytime under [Settings -> Product & Data Analytics]. When toggled off, all telemetry transmissions cease immediately.
💎 4. Data Sovereignty & User Control
- Data Portability: Export your complete library anytime as a standardized, universal Markdown ZIP archive without vendor lock-in.
- Physical Erasure: Uninstalling the extension from your browser instantly wipes all data held within the local browser sandbox.
📬 5. Contact Us
If you have questions or inquiries regarding this Privacy Policy, please contact our team:
- Support Email: [email protected]
- Website: https://aicrosoft.com
Last Updated: October 10, 2026