Privacy Policy

SyncLink — Chrome Extension
Last updated: March 8, 2026

      The short version: SyncLink stores your video collection locally in your browser. We don't collect, transmit, or sell your personal data. AI features send only minimal metadata (access code + thumbnail URLs) for tag generation. That's it.
    

1. What Data We Collect

Your video collection: Stored locally in your browser using chrome.storage.local. This data never leaves your device.

Access validation: When you activate Premium, we send your access code to verify your subscription status. No personal data is attached.

Smart AI Tags & Smart Search: When you use AI-powered features, we send:

Your access code (for authentication)
Thumbnail or frame URLs from saved videos (for AI tag generation)

We do not send your full video collection, browsing history, watch history, or any personal identifiers beyond your access code.

2. What Data We Don't Collect

No accounts. No email, no password, no profile.
No analytics or tracking. No Google Analytics, no telemetry, no usage metrics.
No browsing history. We don't know what sites you visit.
No video content. We never access or transmit the actual videos you save.
No cookies. All API requests use credentials: 'omit'.

3. Local Storage

Your video collection is stored entirely in your browser's local storage. It is not synced to any cloud service. If you uninstall the extension, your locally stored data is removed by the browser — which is why we offer import and export features so you can back up your collection anytime.

5. Permissions

SyncLink requests only the permissions it needs:

storage — Store your video collection locally
activeTab — Detect video content on the page you're viewing
scripting — Enable inline save buttons on supported sites
downloads — Export and save your collection to your computer
contextMenus — Right-click "Save to SyncLink" option
host_permissions (YouTube, X/Twitter, SyncLink API origin) — Built-in inline save on YouTube and X/Twitter, plus access validation and paid AI features
optional_host_permissions — User-granted access for inline save on additional supported sites

When a SyncLink update adds a new built-in site family, Chrome may ask existing users to accept the broader access before the extension re-enables.

6. Third-Party Services

Paid AI features communicate with the configured SyncLink API endpoint for access validation and tag generation. No other third-party services receive your data. We do not use advertising networks, analytics platforms, or data brokers.

7. Data Sharing & Sale

We do not sell, rent, or share your data with anyone. There's nothing to sell — we don't collect it.

8. Children's Privacy

SyncLink does not knowingly collect information from children under 13. The extension does not require an account or collect personal information.

9. Security

SyncLink implements security best practices including:

HTML escaping of all user inputs (XSS prevention)
Message sender validation (extension-origin only)
SSRF protection on outbound requests
CSP compliance (no eval, no inline scripts)
Sandboxed iframes for video playback
Import validation against malicious URL schemes

10. Changes to This Policy

If we update this policy, we'll update the "Last updated" date above. Significant changes will be communicated through the extension's update notes.

11. Contact

Questions about this privacy policy? Reach us at:

Email: support@getsynclink.app

Website: getsynclink.app