Back to Home

Privacy Policy for Notera

Last updated: October 25, 2026

Welcome to Notera ("Notera - Minimalist Notes & To-Do", "we", "us", or "our"). We believe your thoughts, daily plans, and notes are private and should remain exclusively under your control. This Privacy Policy details our architecture, permissions, and storage principles for the Notera Google Chrome extension and companion web resources.

1. Summary: Privacy-First Philosophy

Zero Data Collection
We never collect, transmit, sell, or monetize user data.
100% Local Storage
All content resides offline in chrome.storage.local.
No Remote Servers
No cloud databases, no user accounts, no login walls.
Zero Trackers
No Google Analytics, tracking pixels, or ads.

2. What Data We Handle and How It Is Stored

A. Notes and Tasks Content

  • What is stored: The text, Markdown formatted body, task checklists, tags, folders, pinned status, due dates, and completion timestamps you generate.
  • Where it is stored: Exclusively on your local device in Google Chrome's local storage engine (chrome.storage.local).
  • Transmission: Notes data is never transmitted across any network or uploaded to remote cloud instances.
  • Master Vault Note Encryption: When using the Master Vault, sensitive notes are encrypted locally using authenticated AES-256-GCM and PBKDF2 (100,000 rounds). Plaintext is completely scrubbed from storage at rest. Master passwords and emergency recovery keys are never transmitted to any external server.

B. User Preferences

  • What is stored: Local presentation settings including active theme (Paper, Obsidian, Sepia, Nordic), custom accent colors, font family preferences, sidebar width, and focus mode dimming toggles.
  • Where it is stored: Locally on your computer in chrome.storage.local.

C. Clipped Web Data

  • What is stored: When you explicitly use the right-click context menu or the Alt+N shortcut to capture web highlights, Notera saves the highlighted snippet, source page title, and URL into your active note.
  • Where it is stored: Directly in your local extension notes database. This occurs strictly upon your manual action.

3. Chrome Permissions and Technical Justifications

In adherence to the Chrome Web Store Developer Policies, Notera requests only the minimum necessary permissions required to fulfill its features:

Permission Purpose & Justification
storage Required to store and persist notes, tasks, templates, and visual preferences locally on your machine.
unlimitedStorage Required to store extensive local markdown notes, web clippings, and user-uploaded custom alarm audio files without hitting browser quota limits and risking data loss.
sidePanel Required to deliver the companion side-by-side workspace panel alongside open browser tabs.
contextMenus Required to enable right-click clipping of selected web text into notes or tasks.
alarms Required to schedule automated background backups at user-configured frequencies and check task due times.
notifications Required to display scheduled desktop reminder alerts when a to-do item reaches its user-configured due date and time.
offscreen Required to play customizable audio chime alerts for scheduled to-do task reminders in the background service worker environment.
downloads Required to export and save manual or scheduled JSON backup archives directly to your local Downloads folder.
scripting Required to dynamically inject the floating HUD note window (Alt+H) and extract highlighted text when you invoke Quick Capture.
activeTab Grants temporary, user-initiated execution access for Alt+Shift+N quick text capture, smart link active tab title prefill, and on-demand floating HUD note overlay injection (Alt+H) without requiring broad permanent host permissions or browsing history access.

Least-Privilege Hardening (v1.6.1): Broad tabs permission and static host declarations (such as <all_urls>) were completely eliminated. Notera operates under a zero-host-access model and interacts with web pages strictly on-demand when you explicitly initiate an action. Additionally, v1.6.1 enforces strict Content Security Policy (CSP) compliance with zero inline script event handlers.

4. Third-Party Services & Network Calls

  • External Network Requests: None. Notera does not trigger any background network or API calls.
  • Bundled Dependencies: All script dependencies, icons, and styling are bundled 100% locally inside the extension. No runtime code or CDN scripts are downloaded.
  • Advertising: Notera does not contain ads, affiliate links, or monetized data tracking.

5. Data Retention, Portability, and Deletion

  • Exporting Data: You can export individual notes as Markdown (.md) or download a complete, unencrypted JSON backup of all your notes and tasks at any time from Settings.
  • Trash Recycle Bin: Deleted notes remain in a local Trash bin with configurable auto-purge retention (7, 15, or 30 days) and can be restored or purged permanently immediately.
  • Complete Deletion: Removing Notera from Google Chrome immediately erases all extension files and local storage data created by the extension.

6. Children's Privacy

Notera does not knowingly collect or solicit personal information from children under the age of 13. Because Notera operates entirely locally and collects zero personal data, it complies fully with the Children's Online Privacy Protection Act (COPPA).

7. Changes to This Policy

We may update this Privacy Policy periodically to reflect enhancements or Chrome Web Store policy revisions. Revisions will be published to this page with an updated timestamp.

8. Contact Information

If you have questions, feedback, or concerns regarding this Privacy Policy or Notera's privacy architecture, please reach out: