Your saves.
Your say.

The tool. The developer.

This policy covers the things{i}fw Chrome extension and its companion web app at thingsifw.vercel.app, including saved references, sharing, and AI connections. The service is developed and operated by Smit Chandrapatel. For privacy questions or requests, email smitchandrapatel@gmail.com.

What we keep.

Your account

Your email address, account ID, authentication sessions, and basic profile information supplied by your sign-in provider, such as a name or avatar. Google sign-in is handled through Supabase Auth; the app does not receive your Google password.

Your saves

The images, videos, and links you choose to save or import: media and source URLs, titles, descriptions, thumbnails, alternative text, dimensions, site information, save times, and how the item was saved. We also store your sections and canvas positions.

Your preferences

Browser storage holds sign-in sessions, saved-item identifiers, extension settings, and app preferences such as theme, view, and onboarding state. Earlier versions may also leave local saves or migration backups in browser storage.

Your connections

Sharing recipients’ email addresses, board or section permissions, connected-app identifiers and grants, and visual-search preferences. When enabled, image indexing adds compressed previews, descriptions, and numerical search representations called embeddings.

Support & requests

If you contact us, we receive your contact details and what you send. Hosting and authentication providers may process technical request data such as IP addresses, browser information, timestamps, and errors to deliver and protect the service.

The extension inspects page images, videos, and related links locally to offer saving. It does not build or upload a general history of the websites you visit. URLs and page metadata associated with content you choose to save are part of your library.

A library that works for you.

We use this information to sign you in, save and sync references, fetch previews, organize and search your library, enable sharing and connections you request, respond to support, and maintain security and reliability.

We do not sell your personal data or use it for targeted advertising. The app and extension do not include advertising trackers or third-party behavioral analytics.

Who helps run things.

• Supabase provides account authentication, the database, synchronization, and private storage for indexed image previews.
• Vercel hosts the web app and server functions that handle requests such as link previews, extension sign-in, and reference search.
• Google provides Google sign-in when you choose it, web fonts loaded by the site, and the Gemini API for the AI processing described below. Font and sign-in requests send technical connection information to Google.
• Original content services receive requests when previews or media are loaded. Loading images or videos directly may disclose your IP address and browser information to their hosts. Playing an embedded YouTube video connects to YouTube.
• Apps and people you choose receive content you explicitly share or authorize. Email and social platforms process messages when you use them to contact us.

These services may process information outside your country. Their own privacy terms govern their services. We may also disclose information when legally required or necessary to investigate abuse and protect the service.

Share on your terms.

Board sharing

Your library is account-restricted by default. If you share a board or section, the people you authorize can view and copy the included saves. Remove their access through Share. Copies they already made are outside the app’s control.

Connected AI apps

Connecting an AI app authorizes read access to your own saved images and metadata, either across your library or within selected sections. Grants can include future saves in that scope. The connection cannot add, edit, or delete saves. Revoke access from Connect AI apps; this stops future access but does not remove content already retrieved into another service or conversation.

Image indexing

When you enable visual search, compressed copies of saved images are sent to Google Gemini to generate descriptions. Those descriptions and relevant saved text, including titles, descriptions, and alternative text, are sent to Google to create embeddings. Previews, descriptions, and embeddings are stored in your account to support search.

Search queries

When Google search processing is configured, searches made through connected apps send the query text to Google to generate a search embedding. This can happen even when image indexing is off. Ordinary board text search is separate from this connected-app search.

Google’s processing is subject to the Gemini API terms and the applicable API service configuration. The connected AI app’s own privacy and retention policies apply to the content it receives. Avoid sending sensitive information you do not want those services to process.

Why Chrome asks.

Website access

Lets the extension detect images and videos, show the save control, read metadata for saves, and fetch link previews across websites. On the companion app, a bridge connects your account to the extension.

Storage

Keeps extension settings, sign-in sessions, and saved-item identifiers locally. Unlimited storage supports larger local data sets and older saved-data backups.

Scripting

Restores the save controls in open tabs after the extension is installed or reloaded.

Alarms

Periodically syncs saved-item identifiers so checkmarks reflect changes made on your board or another device.

You can turn off hover controls in the extension popup, restrict website access in Chrome’s extension settings, or uninstall the extension.

Keep it. Export it. Remove it.

Saved content and account records are kept to provide your library until you remove them or request account deletion. Browser preferences and local backups remain until cleared. Uninstalling the extension does not delete your cloud account or its saves.

Deleting a save removes it from the active library. Turning off visual search removes the searchable index and queues cached previews for background deletion. Provider backups and operational logs may persist under the providers’ retention processes; deletion from active storage is not a promise of immediate removal from every backup.

Connections to our hosted service use HTTPS, and database access rules restrict records to your account and authorized sharing or connections. No storage or transmission method is completely secure. Original media may still be delivered by an external website under that website’s security practices.

You have options.

• Export your library using Export in board Settings to download a JSON copy.
• Delete saves on your board, and manage sharing from Share.
• Disconnect apps or disable indexing from Connect AI apps.
• Clear local data through your browser’s site-data and extension controls. Export anything you want to keep first.
• Request access, correction, or account deletion by emailing smitchandrapatel@gmail.com from the email associated with your account. We may need to verify ownership before acting.

Depending on where you live, you may have additional rights to access, correct, delete, or transfer personal data, restrict or object to processing, withdraw consent, or contact your local data-protection authority. Contact us to exercise applicable rights.

A question about your data?

Contact Smit Chandrapatel for privacy questions or requests. Please don’t include passwords or sign-in codes.

We may update this policy as the service changes. The date at the top identifies the latest version. Material changes to data practices will be disclosed in the app, and consent will be requested where required before new optional processing begins.