Private Library

Privacy policy

Effective August 29, 2026

Private Library keeps a personal record of pages you visit so you can find them across your own browsers and devices. It is built for one private library, not advertising or behavioral profiling.

What the app records

When capture is on, the browser extension records the URL, page title, visit time, and source device for ordinary HTTP and HTTPS pages. It does not record private or incognito windows. It does not collect passwords, cookies, payment information, form contents, or authenticated sessions.

Why browser access is required

The extension uses browser tab and navigation access, plus access to websites, to detect page changes and show the resulting private history. Local storage keeps the library, settings, encryption material, and sync state on each device.

Private sync

Sync is optional. When configured, the extension encrypts library records in the browser before sending them to the private relay. The relay stores opaque encrypted events and cannot read page URLs, titles, timestamps, device names, or deletion state. A separate setup code contains the encryption key and transport credentials. Anyone with that code may be able to access the library.

Network and operational data

Cloudflare and the private relay may process normal request metadata such as IP address, request time, response status, and encrypted payload size to deliver and protect the service. Private Library does not use advertising trackers or third-party analytics.

Retention and deletion

Recent readable history stays in each browser until you clear it or the local limit removes older entries. The relay is append-only and may retain old encrypted events and encrypted backups. Clearing history creates encrypted deletion records so connected devices remove the readable entries; it does not guarantee immediate removal of older ciphertext from relay storage or backups.

Sharing

Private Library does not sell personal data. Data is shared only with the infrastructure needed to provide encrypted sync and network protection, or when required by law.

Your control

You can pause capture, leave sync disconnected, clear this browser's recent pages, or remove the extension. Device names can be changed in settings. Questions about the beta can be sent through its Chrome Web Store or TestFlight contact channel.

Changes

This page will be updated when the app's data handling changes. The effective date above identifies the current version.