https://hjm79.github.io/harbordrop/privacy_policy.html

HarborDrop — Privacy Policy
Last updated: February 13, 2026

Overview
HarborDrop is a browser extension that detects downloadable media on web pages and forwards download requests to the HarborDrop macOS application via Native Messaging. We are committed to protecting your privacy.

Data Collection
HarborDrop does NOT collect, store, transmit, or share any personal data.

No browsing history is stored or transmitted to any server.
No analytics or tracking services are used.
No user accounts or registration required.
Data Usage
The extension processes the following data locally on your device only:

Media URLs: Detected from network requests to display in the popup. Cleared when the tab is closed or navigated.
Cookies: Read for the current download URL only and forwarded to the local macOS app to authenticate downloads. Never sent to any external server.
Page Title: Read from the active tab to use as a suggested filename. Only sent to the local macOS app.
User Preferences: The auto-intercept toggle state is stored locally using chrome.storage.local.
Permissions
Permission Purpose
downloads Intercept and redirect downloads to HarborDrop app
activeTab Access current tab info for media detection
cookies Forward authentication cookies to local app for download
contextMenus Add "Download with HarborDrop" context menu
nativeMessaging Communicate with the local macOS HarborDrop app
storage Store user preference (intercept toggle)
webRequest Detect media files (video/audio) from network traffic
tabs Read tab title and URL for download context
host_permissions (:///*) Detect media on any website the user visits
Third-Party Services
HarborDrop does not use any third-party services, analytics, or advertising. All communication is strictly between the browser extension and the local HarborDrop macOS application.

Data Retention
Detected media URLs are stored in memory only and are cleared when the browser tab is closed or navigated to a new page. No data is persisted beyond the browser session, except for the user's intercept toggle preference.