This policy covers the browser extension for media.humane.tools. The web application at
media.humane.tools has its own account settings and data handling; this
document describes only what the extension itself collects, stores, and
transmits.


Only when you explicitly save a page (toolbar click or a keybinding you
pressed), the extension sends to the Media Inbox server:

• the page's URL and title,
• any tags you chose or preconfigured for that keybinding,
• your API token, to authenticate the request.

Nothing is transmitted while you merely browse. The "already saved"
toolbar indicator is computed on your device against a local copy of your
saved-URL list, which the extension periodically downloads from your own
inbox. This sync sends only your API token—never the pages you are
visiting.

The extension contains no analytics, no telemetry, no ads, and communicates
with no third parties. Its only network peer is the server that
hosts your media list.

• your API token (local to the browser profile, never synced by the browser),
• your preset tags per keybinding (synced across your browsers by your
  browser's own sync, so your keybindings work everywhere),
• the local mirror of your saved URLs described above,
• your not-yet-synced saves (URL, title, tags)—saving works offline and
  queues locally; each queued save is sent to the server the next time it is
  reachable, then removed from the queue.

Uninstalling the extension removes all of this.


Pages you save are stored in your Media Inbox account so the web app can show
them to you. They are used solely to provide the service—they are not sold,
shared with third parties, or used for advertising. You can delete individual
links in the extension popup or the web app, and you can delete your account
data by contacting the address below.


bah@posteo.de