Privacy Policy

Last updated: September 24, 2026

This Privacy Policy explains how Kontextlo (“we”, “us”) handles information in connection with the Kontextlo browser extension and website. Kontextlo is built to be local-first: your workspace data stays on your device unless you explicitly turn on backup.

Summary

Data stored on your device

Kontextlo stores the following locally via IndexedDB and chrome.storage.local: the Spaces you create and their settings, the tabs inside each Space (URL, title, and favicon URL), saved sessions and resources, and your preferences (such as theme). A random client identifier is generated and stored locally to support feature rollout; it is not tied to your identity.

Optional Google Drive backup

If you sign in and enable auto-backup, Kontextlo uploads a copy of your workspace data to your own Google Drive, inside the private appDataFolder. We request only the minimum OAuth scopes needed for this: openid, email, profile, and drive.appdata. The drive.appdata scope is restricted to an application-specific hidden folder — we cannot see the rest of your Drive. Backups live in your Google account; you can delete them from Settings or by revoking access at myaccount.google.com/permissions.

Information sent to our servers

Third-party services

We rely on a small number of processors to run the product: Google (Drive backup and sign-in), Paddle (our payments and checkout provider and Merchant of Record), and Cloudflare (hosting and request handling for our website and API). Payment card details are handled by Paddle and are never received or stored by us. Each provider processes data under its own privacy policy.

Cookies and local storage

The extension does not use advertising cookies. Our website uses only the storage and cookies necessary for core functionality, such as a short-lived signed cookie for the administrative area. The extension keeps its state in local browser storage as described above.

Data retention

Local data remains until you delete it or uninstall the extension. Google Drive backups remain in your Google account until you delete them. License records are retained as needed to provide and support your purchase. Aggregate analytics are retained only in de-identified, aggregated form.

Your choices and rights

Security

Communication with Google Drive and our servers uses HTTPS and OAuth 2.0. Kontextlo runs under a strict Manifest V3 Content Security Policy and does not load or execute remote code.

Children

Kontextlo is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

International users

We operate from India. If you use Kontextlo from another country, you understand that information may be processed in locations with different data-protection laws than your own.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated effective date; your continued use after an update constitutes acceptance.

Contact

Questions about this policy? Email hello@kontextlo.com.