Browser Extension Privacy Policy

The Deskletics browser extension (“Deskletics — Movement Breaks” for Chrome and Firefox) is built to run entirely on your device. This policy explains what the extension stores, the one optional feature that talks to the network, and the rights you have under the GDPR.

Last updated: 2 July 2026
1. Who is responsible

The controller responsible for any personal data processed in connection with the extension, within the meaning of the EU General Data Protection Regulation (GDPR), is:

PS New Media (owner: Paolo Schmidt)
Ulrich-Schreier-Straße 17, 5020 Salzburg, Austria
Email: hello@deskletics.app

The extension is a companion to the Deskletics web app. This page covers the extension itself; how we handle data on our servers and website is described in the main Deskletics Privacy Policy.
2. The short version

The extension works fully offline. Your settings, break counters and streak live in your browser and never reach our servers.
It contains no analytics, no tracking and no third-party services, and it never reads, collects or transmits the content of the pages you visit or your browsing history.
The only network activity is optional and started by you: if you connect your Deskletics account in the settings, the extension signs you in and syncs the breaks you complete to your own account at deskletics.app. Nothing else is ever sent.
Uninstalling the extension removes the data it stored in your browser.


1. What the extension stores on your device

Everything in this section stays in your browser’s extension storage. It is never transmitted to us, and we cannot see it.

Your settings: reminder interval, active days and hours, the length of the gentle warning before a break, snooze length, and whether you have finished the initial setup. If you are signed into your browser with extension sync enabled, your browser vendor may sync these settings to your other devices through its own sync service — a browser feature under your control, not our servers.
Local break data: when the next break is due, today’s break count, your day-by-day streak, and which exercises you did recently (so the next break can pick something different).
Only if you connect an account: your account email, an access token that authenticates the sync, and a small queue of completed breaks waiting to be synced.


1. Optional account sync — the only network activity

In the extension’s settings you can connect your deskletics.app account so that breaks you finish in the browser count towards your streak and stats. If you do:

Signing in sends your email address and password over an encrypted connection (HTTPS) to deskletics.app, which returns an access token. The extension stores the token and your email locally; it never stores your password.
Each completed break syncs one record to your own account: a random session identifier, the duration, the target duration, how much of the break you completed, and the body areas the exercise focused on (for example “neck, upper back”).
What is never sent: the page you were on, URLs, tab titles, page content, browsing history, or anything you typed.


Once synced, these records are part of your Deskletics account and are handled as described in the main Privacy Policy (activity data, retention, processors and your rights). You can disconnect the account at any time in the extension’s settings, which removes the token from your browser; the extension then goes back to working fully offline.
Legal basis: Art. 6(1)(b) GDPR (providing the sync feature you asked for).
5. What the extension never does

It does not read, collect or transmit the content of web pages, URLs or your browsing history.
It contains no analytics or telemetry of any kind — not even anonymous usage counters.
It loads nothing from third parties: no external scripts, fonts, images or CDNs. Everything, including all 14 exercises, is bundled inside the extension.
It shows no ads and executes no remote code.
It never sells or shares your data — by default there is nothing to sell, and synced account data is only ever used to provide Deskletics itself.


1. The permissions the extension asks for

Browsers show a permission warning when you install the extension. Here is what each permission is actually used for:

Alarms: schedules the next break at your chosen interval without needing a tab or popup left open.
Storage: saves your settings and the local break counters/streak described in section 3.
Idle detection: notices when you have stepped away from the keyboard so a due break is quietly postponed instead of fading in on an unattended screen. Nothing about your activity is stored or transmitted.
Scripting: injects the break-overlay UI into the active tab when a break is due.
Access to all websites (“read and change data on all sites”): a break can become due while you are on any website, so the overlay must be able to draw on whatever page is active. This permission is used solely to display the overlay — the extension does not read, collect or transmit page content.


1. Links to deskletics.app

Some buttons in the extension (for example in the popup footer or on the end-of-break card) open deskletics.app in a new tab. These links carry a campaign tag that tells us the visit came from the extension — no identifier, just the source. When you uninstall the extension, your browser may open a short goodbye page on deskletics.app. Both are ordinary page visits, covered by the website’s Privacy Policy and Cookie & storage policy — not background data transmissions.
8. Data retention and deletion

Uninstalling the extension removes the data it stored in your browser. Breaks that were already synced to your Deskletics account remain part of that account and follow the retention and deletion rules of the main Privacy Policy — you can delete them together with your account, or by emailing hello@deskletics.app.
9. Your rights

The only personal data we hold in connection with the extension is what you choose to sync to your account. For that data you have the full set of GDPR rights — access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21) — as described in the main Privacy Policy. To exercise them, email hello@deskletics.app. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna.
10. Changes to this policy

We may update this policy as the extension evolves or the law changes. The current version always lives at this page, with the “last updated” date above.
11. Contact

Questions about privacy? Email hello@deskletics.app or write to PS New Media, Ulrich-Schreier-Straße 17, 5020 Salzburg, Austria.