Privacy Policy
Last updated: November 25, 2025
My Shortcuts ("the extension") replaces Chrome's default new tab page with a customizable dashboard. This privacy policy explains what data the extension processes, how that data is used, and how it complies with the Chrome Web Store Developer Program Policies, including the Limited Use requirements.
Data We Process
All data handled by the extension is user-provided and tied to the features you choose to use. The extension does not collect analytics, personal profiles, or background browsing history.
Shortcut Data
- Section names that you create.
- Shortcut titles, URLs, and their display order.
Preferences
- Dark/light mode preference.
- Any other UI settings stored by the extension.
Current Tab Data (on demand)
- When you open the browser action popup and click "Add Shortcut," the extension reads the active tab's title and URL to pre-fill the form. Internal Chrome pages (e.g.,
chrome://) are ignored.
How We Use the Data
- Store and sync your shortcuts and settings across Chrome instances you are signed into.
- Display shortcut information and favicons on the new tab page.
- Run searches using your default search engine when you submit queries from the new tab.
- Prefill the "Add Shortcut" popup with the active tab details to save you manual typing.
We do not sell, rent, or monetize any data.
Where the Data Is Stored
- The extension stores all shortcut and preference data locally using Google Chrome's
chrome.storage.syncAPI. When Chrome Sync is enabled, Google synchronizes this data with your Google account so it can appear on other signed-in Chrome browsers. We never see or control that synced data. - No project-owned servers receive or store any extension data.
Data Sharing
- Google Chrome Sync: Google may store the shortcut data you create if Chrome Sync is enabled. This is part of Chrome's functionality and subject to Google's privacy policy.
- Google Favicon Service: When a shortcut is created or edited, the extension fetches the favicon from
https://www.google.com/s2/favicons?domain_url=.... This results in the destination URL's domain being sent to Google to retrieve the icon image. No other information is included in that request. - No other third parties receive extension data.
Permissions Explained
storage: Save and sync your shortcuts and preferences.tabs: Read the currently active tab's title and URL only when you open the popup to add that page as a shortcut.search: Forward search terms you enter on the new tab page to Chrome's default search provider viachrome.search.query, ensuring your chosen provider handles every search.
The extension requests the minimum permissions required to provide these features.
Security and Retention
- All communication with Chrome storage and the favicon service uses HTTPS.
- Data remains in Chrome storage until you delete it, clear Chrome data, or uninstall the extension.
Your Choices
- Delete any shortcut or section from the new tab UI.
- Clear Chrome's browsing data to remove stored extension data.
- Uninstall the extension to remove all associated data.
Compliance Statements
- Limited Use: The extension's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension's single purpose and is never used for advertising, profiling, or resold.
- No Human Access: No human reads user data unless you explicitly email us requesting troubleshooting assistance and voluntarily provide relevant details.
Children's Privacy
The extension is designed for general productivity use and is not directed toward children under 13. We do not knowingly collect information from children. If you believe a child provided data, please contact us to request deletion.
Contact
Questions about this policy or data handling can be sent to pmigueli@gmail.com. Additional information about the project lives at https://www.pdemiguel.me.
By installing or using My Shortcuts you agree to this privacy policy. We will update this document if data practices change and will include a new "Last updated" date above.