Privacy Policy
Last updated: 6 August 2026 · Applies to the Nimbus browser extension and this website.
Nimbus does not collect, transmit, sell, or share any user data. There is no account, no server that belongs to us, no analytics, and no tracking of any kind. This policy explains what that means in practice, and the one place your data does travel that is worth being precise about.
Data we collect
None. Nimbus collects none of the categories the Chrome Web Store asks about: no personally identifiable information, health information, financial or payment information, authentication information, personal communications, location, web history, user activity, or website content.
Nimbus cannot read the pages you visit. It requests no host permissions, registers no content scripts, and has no access to your browsing history, tabs, or the contents of any website.
What Nimbus stores, and where
The notes and to-dos you write are saved to your browser's own extension storage, in two places at once:
-
chrome.storage.local— on your computer, in your Chrome profile. -
chrome.storage.sync— Chrome's own sync area, so your notes follow you to your other signed-in Chrome installations.
The one honest caveat. The Nimbus extension itself
makes no network requests — it has no server, no API, and no endpoint
to call. But chrome.storage.sync is a feature of Chrome,
not of Nimbus: when you are signed into Chrome with sync enabled,
Chrome replicates that storage area through your own Google Account so
it can reach your other devices. That transfer is performed by Chrome
under
Google's Privacy Policy,
it goes to your account rather than to us, and we can never see it. If
you prefer to avoid it entirely, turn off Chrome sync or sign out of
Chrome — Nimbus keeps working from local storage alone.
Permissions, and why each one exists
-
storage— to save your notes and to-dos so they survive closing the popup and restarting the browser. This is the only way the extension persists anything. -
sidePanel— to let you open Nimbus in Chrome's side panel, so your list stays visible next to the page you are working on instead of closing when the popup loses focus.
That is the complete list. Nimbus requests no other permissions and no host access.
No remote code, no third parties
Everything Nimbus runs is contained in the package you install from the Chrome Web Store. No scripts are fetched at runtime, nothing is loaded from a CDN, and no code is evaluated from a remote source. Even the fonts are bundled as files inside the extension rather than requested from a font service, so Nimbus renders identically with the network switched off. There are no third-party SDKs, advertising libraries, or analytics packages of any kind.
Backups you create yourself
Nimbus can export your notes to a JSON file through Settings → Back up to a file. That file is written by your browser to your own Downloads folder. It is never uploaded anywhere, and we have no copy of it. Restoring reads a file you choose and merges it into your existing data.
Deleting your data
Uninstalling Nimbus removes its local storage along with the extension. Data held in Chrome sync is managed by your Google Account — you can clear it from Chrome's sync settings. Because we never receive your data, there is nothing for us to delete on your behalf and no deletion request to send us.
Children's privacy
Nimbus is a general-purpose productivity tool and is not directed at children. Because it collects no data at all, it collects no data from children.
Changes to this policy
If Nimbus ever changes what it stores or where, this page will be updated and the date at the top revised before the change ships. The Chrome Web Store listing's data-usage disclosures will be updated at the same time.
Contact
Questions about this policy, or about how Nimbus handles data, can be raised at github.com/NagiPragalathan/chrome_notes/issues, or through the developer contact address listed on the Chrome Web Store listing.