Arrows Lite — Privacy Policy
Overview
Arrows Lite is a browser extension that helps you organize tabs into a working area (move / save & reopen / close), keep per-page sticky notes, and — only when you ask — generate a short AI "page overview" for a saved case. This policy explains exactly what data the extension handles, what stays on your device, and the only case in which data leaves your device. It also covers our website, arrows.jewelrysunflower.com (see Our website), which uses Google Analytics; the extension itself does not.
We designed Arrows Lite to keep your data on your device by default. The only time any data is sent off your device is when you press "Create AI page overview."
Data stored locally on your device
The following is stored using the browser's local extension storage
(chrome.storage.local) on your own device. It is not transmitted
to us and is not synced to any server.
- Saved Cases: for each case you save, the page title, the page URL, your optional note, and (if you generated one) the AI page overview. The URL is stored so you can reopen the page or copy its address later.
-
Sticky Notes: the note text and its position/size for a page. Notes are
keyed by a one-way SHA‑256 hash of the page's
origin + pathname(query string and fragment removed). The raw URL of a sticky-note page is not stored. - Display-language setting: your chosen UI language (or "Auto").
Uninstalling the extension removes this local data.
Data included when you export
If you use Export, Arrows Lite writes your Saved Cases to a JSON file on your device (that you choose to save). This export contains the Saved Case fields listed above, including the page URL. It does not contain favicon images, authentication tokens, AI configuration, or usage counters. The exported file is under your control; we never receive it.
AI page overview (only when you request it)
The AI page overview runs only when you explicitly click the button for a saved case. When you do:
- What is sent: the page title and the page's visible, non-input text (truncated to at most 6,000 characters), plus the output language you selected.
- What is NOT sent: the page URL, cookies, images, form/input values, passwords, hidden or invisible elements, iframes, and page markup/attributes. Text is read from the main frame only.
- How it travels: over HTTPS to our own relay service, which forwards the title and text to the AI provider and returns a short overview. The overview is stored with the case only if you then save it.
- Group overview: if you use Groups and ask for an AI overview of a group, only the group name and the titles of the tabs in that group are sent (plus the output language) — never their URLs or page contents.
For Chrome-internal or non-readable pages (for example chrome:// pages), the
overview button does not send anything; it simply uses your save name as the
overview.
Service providers in the AI path
- Our relay (Cloudflare Worker) — receives the title, the visible text, the selected output language, and your sign-in token for authentication; enforces per-user and overall usage/budget limits; forwards the title and text to the AI provider; returns the overview. It does not log request contents, URLs, or tokens.
- Anthropic (Claude) — generates the short overview from the submitted title and text.
- Google — you sign in with Google, which provides a sign-in token; our relay then reads only your account's stable identifier from Google's UserInfo endpoint (see below).
We describe these roles exactly as implemented and do not use your data for any other purpose.
Google sign-in (usage limit only)
To use the AI page overview, you sign in with Google. Arrows Lite requests only the
openid scope. Our relay reads only a stable account identifier
(sub) from Google's UserInfo endpoint, used solely to enforce a per-account
usage limit. We do not use, store, or send your email address, name, or profile.
The Google token is kept in memory during the request and is not stored persistently
by the extension or our relay. Each Google account has a usage limit for AI overviews; the
extension's other features need no sign-in.
What we do not do
- We do not sell or rent your data.
- The extension does not use analytics, advertising SDKs, trackers, or fingerprinting.
- We do not load or execute remote code — all extension code ships inside the package.
- We do not read all your tabs or all page content; text extraction happens only on the specific tab and only when you trigger the AI overview.
- We do not transmit your Saved Cases, notes, or settings to us.
Our website (arrows.jewelrysunflower.com)
This section applies only to our website, not to the extension. The website uses Google Analytics 4 (provided by Google) to understand how visitors find and use it — for example, which pages are viewed and how often the “Add to Chrome” buttons are clicked.
-
What is measured: pages viewed, clicks on buttons that lead to the Chrome Web Store
(and which button), the referring site, campaign parameters in the link you arrived from
(
utm_*), page language, and general device/browser information. Google may derive an approximate location from your IP address; we do not receive your IP address. -
Visit source: to attribute a button click to the way you arrived (for example an
ad, a search engine, or another site), the website keeps that information for the current visit in
your browser's session storage; it is cleared when you close the tab. For ad click identifiers
(such as
gclid) we keep only their type, not their value. -
Cookies: Google Analytics may set first-party cookies (such as
_ga) when storage is allowed. For visitors in the European Economic Area, the United Kingdom, and Switzerland, analytics and advertising storage are off by default and are turned on only if you choose “Accept” in the cookie notice. You can change your choice at any time via Cookie settings in the website footer. You can also use Google's opt-out browser add-on. - Advertising: if we advertise on Google, we may use Google Analytics to measure how many visitors from those ads click “Add to Chrome” (conversion measurement in Google Ads). We do not use remarketing or personalized advertising audiences, and we do not place other advertising pixels on the website.
- We do not use this information to identify you, and it is never combined with data from the extension. Google processes this data under its own terms and privacy policy (policies.google.com/privacy).
Data retention
- Local data remains on your device until you delete a case/note or uninstall the extension.
- The AI request's title and text are processed to produce the overview and are not stored by our relay; retention on the AI provider's side is governed by that provider's terms.
Children
Arrows Lite is a productivity tool and is not directed to children.
Optional AI feature
The AI Page Overview is an optional feature and may be improved, changed, paused, or discontinued at any time. If it is paused or discontinued, your saved cases and any previously generated overviews remain available on your device, and other features are unaffected.
Changes to this policy
If this policy changes, we will update this document and its "Last updated" date before publishing a new version.
Contact
We do not provide individual support. For improvement suggestions and bug reports, please use our Improvement & Bug Report Form. Submissions help us improve the extension and build our FAQ; as a rule, we do not reply individually.