Private Library

Privacy policy

Effective September 8, 2026

Private Library keeps a personal record of pages you visit so you can find them across your own browsers and devices. It is built for one private library, not advertising or behavioral profiling.

What the app records

When capture is on, the browser extension records the URL, page title, visit time, and source device for ordinary HTTP and HTTPS pages. It does not record private or incognito windows. It does not collect passwords, cookies, payment information, form contents, or authenticated sessions.

Content you send with Drop

Drop stores notes, links, and files you explicitly choose to send. It does not monitor your clipboard or automatically collect page contents. Readable items and encryption material stay in your browser profile. Attachment chunks are encrypted before local staging and upload; other connected browsers download files only when requested.

Why browser access is required

The extension uses browser tab and navigation access, plus access to websites, to detect page changes and show the resulting private history. Local storage keeps the library, settings, encryption material, and sync state on each device.

Private sync

Sync is optional. When configured, the extension encrypts library records in the browser before sending them to the private relay. The relay stores opaque encrypted events and cannot read page URLs, titles, timestamps, device names, note text, file names, or file contents. For attachment storage and expiry, it can see opaque attachment IDs, byte counts, chunk counts, and removal timing. A separate setup code contains the encryption key and transport credentials. Anyone with that code may be able to access the library.

Network and operational data

Cloudflare and the private relay may process normal request metadata such as IP address, request time, response status, and encrypted payload size to deliver and protect the service. Private Library does not use advertising trackers or third-party analytics.

Retention and deletion

Readable library records stay in each browser until you remove them. The relay is append-only and may retain old encrypted events and encrypted backups. Clearing history creates encrypted deletion records so connected devices remove the readable entries; it does not guarantee immediate removal of older ciphertext from relay storage or backups.

Drop file removal has a seven-day restore window before attachment bytes are purged on subsequent Drop activity. Incomplete or unpublished uploads expire after 24 hours. Cancelled unpublished uploads are removed when the cancellation reaches the relay. Downloaded copies, old encrypted events, and backups may remain. Deleting pages does not delete Drop items.

Sharing

Private Library does not sell personal data. Data is shared only with the infrastructure needed to provide encrypted sync and network protection, or when required by law.

Your control

You can pause capture, leave sync disconnected, clear this browser's recent pages, or remove the extension. Device names can be changed in settings. Questions about the beta can be sent through its Chrome Web Store or TestFlight contact channel.

Changes

This page will be updated when the app's data handling changes. The effective date above identifies the current version.