Privacy & Security

Privacy Policy

Pointer Chrome Extension

Last Updated: July 7, 2026

Overview

The Pointer Chrome Extension ("Extension") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Data We Collect

The Pointer Chrome Extension collects and stores the following information:

  • Authentication Token: Your login credentials are securely stored in your browser's local storage for session management
  • User Information: Your name, email, and user ID (provided during login)
  • Organization & Project Data: List of organizations and projects you have access to
  • Page Information: The URLs and page paths of websites where you add comments

How We Use Your Data

  • Authentication: To verify your identity and maintain your logged-in session
  • Comment Management: To associate your comments with your account and project
  • Cross-Environment Sync: To match comments across different environments (production, staging, local) using page paths

🔒 Data Storage & Security

  • Local Storage Only: All data is stored locally in your browser using the browser's storage API
  • No Server Storage of Tokens: Your authentication token is never transmitted to or stored on our servers
  • No Third-Party Sharing: Your data is never shared with third parties or advertisers
  • No Tracking: We do not track your browsing behavior beyond what's necessary for the Extension to function

Data Deletion

You can delete all locally stored data by:

  1. Going to Chrome Settings → Privacy and Security → Clear browsing data
  2. Selecting "Cookies and other site data"
  3. Or by uninstalling the extension, which removes all associated data

Comments

Comments you create are sent to and stored on the Pointer server. Those comments are governed by your organization's policies and the Pointer application's privacy terms.

Permissions We Request

Pointer requests the following permissions to function properly:

  • storage: Store authentication session locally in your browser
  • scripting: Inject the comment widget interface into web pages
  • tabs: Track which tab the extension is active on
  • activeTab: Access the current tab's URL for comment management
  • <all_urls>: Allow you to add comments on any website

❓ Questions?

For questions about this privacy policy or to report privacy concerns, please contact your organization's Pointer administrator.

Changes to This Policy

We may update this privacy policy at any time. We will notify you of any changes by updating this document with a new "Last Updated" date.