Chrome Extensions

Privacy Policy

Last updated: Oct 23, 2026

Linkkly is a Chrome extension that helps you save links and receive a weekly digest via Gmail. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

Data We Collect

  • Google account email address — used to authenticate you and send weekly digest emails from your Gmail account.
  • Saved links — URLs, page titles, descriptions, thumbnail image URLs, and keywords from pages you choose to save.
  • User settings — your preferred digest send day, time, mailing list, and optional Slack webhook URLs.
  • Link interaction data — how many times you've opened a saved link (stored locally only).

How We Use Your Data

All data is used solely to provide the core functionality of Linkkly:

  • Sending your weekly digest email via your own Gmail account (using Gmail API).
  • Optionally forwarding your digest to a Slack channel via a webhook URL you provide.
  • Displaying your saved links within the extension popup and options page.

We do not use your data for:

  • Advertising or ad targeting.
  • Analytics or behavioral tracking. (The linkkly.xyz website measures anonymous usage as described in Section 6; none of the data above is used for it.)
  • Selling, renting, or sharing with third parties.
  • Developing, improving, or training generalized AI or machine learning models.
  • Human reading of your data, except when required for security reasons, to comply with applicable law, or with your explicit consent.

Compliance with Google API Services User Data Policy

Linkkly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Raw or derived user data obtained through Google Workspace APIs is used in compliance with Google's User Data Policy, including the Limited Use requirements.

Data Storage

All data (saved links, settings, email address) is stored locally in your browser using chrome.storage.local. Your data never leaves your device except when explicitly sending emails via Gmail API or Slack webhooks that you configure.

We do not operate any servers or databases that store your personal data.

Data Protection Mechanisms for Sensitive Data

Linkkly protects sensitive user data, including OAuth tokens received via the Gmail send permission (gmail.send), through the following mechanisms:

Storage

  • All OAuth tokens and user data are stored exclusively in chrome.storage.local within your own browser.
  • Linkkly operates no backend server. No user data is stored on any external server or database.
  • Your data never leaves your local device.

Transmission

  • All communication with Google APIs is conducted over HTTPS (TLS 1.2 or higher) encrypted channels.
  • OAuth tokens are handled according to the OAuth 2.0 standard protocol.

Access Control

  • Data is accessible only within Chrome's isolated extension sandbox.
  • Neither Linkkly developers, operators, nor any third party can access your data.

Principle of Least Privilege

  • Linkkly requests only the minimum scope (gmail.send) required for its core feature.
  • Linkkly does not request scopes for reading, modifying, or deleting your emails.

User Control

  • You can disconnect Gmail at any time from the extension settings.
  • Disconnection immediately deletes the stored OAuth token and stops all email sending.
  • You can also revoke permissions directly from your Google Account permissions page (https://myaccount.google.com/permissions).

Retention

  • OAuth tokens are retained only until you disconnect or uninstall the extension.
  • Uninstalling the extension automatically and permanently deletes all data in chrome.storage.local.
  • Linkkly maintains no backups of your data.

Breach Notification

  • Since Linkkly operates no backend infrastructure, there is no risk of server-side data breaches.
  • If a security vulnerability is discovered in the extension itself, a patch will be deployed immediately and distributed to users via the Chrome Web Store automatic update mechanism.

Third-Party Services

Linkkly interacts with the following third-party services:

  • Google Gmail API — used to send your weekly digest email from your own Gmail account. Your use of Gmail is subject to Google's Privacy Policy (https://policies.google.com/privacy).
  • Slack (optional) — if you choose to add a Slack webhook URL, your digest content will be sent to that Slack channel. This is entirely optional and configured by you.

Website Usage Analytics

To improve the curated feed and the reading features, the linkkly.xyz website collects a small set of anonymous usage events: pages viewed, theme tabs selected, which article cards are shown and opened, reading progress and Listen use on Global Read articles, clicks on the popular-stocks ticker, and clicks on the extension install link.

  • Events carry a random identifier stored in your browser. It is never linked to your email, Google account, bookmarks, or any extension data.
  • The bookmarks features and the extension send no analytics events; what you save stays on your device as described above.
  • We use no third-party analytics services or advertising trackers. Events go only to Linkkly's own storage and are used only to understand and improve the service.
  • Clearing the site's browser data removes the identifier, and a fresh one is unrelated to the old.

Data Sharing

We do not sell, rent, trade, or share your personal data with any third parties, except as described above (Gmail API and optional Slack integration that you configure yourself).

Data Retention & Deletion

Your data is stored locally on your device and persists until you clear it. You can delete all stored data at any time from the Linkkly options page using the "Clear all data" feature. Uninstalling the extension will also remove all locally stored data.

Permissions We Request

  • identity / identity.email — to authenticate you with your Google account and retrieve your email address for sending digests.
  • storage — to save your links and settings locally in the browser.
  • alarms — to schedule your weekly digest at your preferred day and time.
  • activeTab — to read the current tab's URL and title when you save a link.
  • scripting — to extract page metadata (title, description, thumbnail) from the active tab when saving a link.
  • bookmarks — to optionally sync newly created or updated Chrome bookmarks into your Linkkly list while bookmark sync is enabled.
  • host permissions (https://gmail.googleapis.com/, https://www.googleapis.com/) — to send emails via Gmail API on your behalf.

Children's Privacy

Linkkly is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of Linkkly after changes constitutes your acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy, please contact us at: leejaegoo.us@gmail.com