Privacy Policy

Last updated September 30, 2026

This Privacy Policy explains how Jottathing collects, uses, stores, and shares information when you use the Jottathing browser extension and sync service.

Information Jottathing Handles

• Notion account and workspace information returned during Notion OAuth, such as account identifiers, name, email address, workspace ID, and workspace name.
• Authentication and session metadata required to keep you logged in, including an HTTP-only browser session cookie, its server-side hash, IP address, user agent, and token expiry metadata.
• User-generated content you create or sync, including notes, highlights, page titles, source links, project metadata, images, audio, and other media you choose to add.
• Website content and browsing-related data you intentionally capture with the extension, such as selected text, source URLs, page titles, and highlight context.
• Synchronization metadata needed to map local Jottathing content to Notion pages, blocks, databases, and file uploads.

How Information Is Used

Jottathing uses this information to authenticate with Notion, create and update your Jottathing workspace structure, synchronize content across devices, upload or refresh media, detect sync conflicts, provide user-facing capture features, prevent abuse, and maintain service security.

Sharing

Jottathing shares user data with Notion only as needed to provide the sync features you request. Jottathing uses Supabase and Cloudflare infrastructure to store and process authentication, session, and synchronization data. If you configure a custom sync server, that server receives your Jottathing authentication data and any content you sync to it; review its operator's privacy and security practices. Jottathing does not sell user data and does not use user data for personalized advertising.

Local Storage

The extension stores local projects, pages, pending sync operations, server configuration, a non-secret account identifier used to keep retained documents bound to their original Notion account, and legal acceptance metadata in browser storage and IndexedDB on your device. The extension does not store Notion access or refresh tokens; those credentials are kept in server-side storage while connected.

Security

Jottathing transmits data using HTTPS in production and stores authentication tokens in server-side storage. You should keep your browser profile, device, and Notion account secure.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Your Choices

Logging out in the extension signs you out, asks Notion to revoke its access token, and removes Jottathing's stored Notion access and refresh tokens and active session. Local documents and queued edits remain in this browser and stay bound to their original Notion account. If server cleanup cannot be confirmed, the extension reports that result.

Delete connection in Settings removes the Jottathing account, sync data, and queued cloud payloads from Jottathing's server. After the server confirms deletion, the extension removes local Jottathing documents and storage from this browser. Pages already stored in Notion remain. Local copies on other browsers or devices are not remotely erased by this action and must be removed on those devices. Jottathing retains a minimal deletion receipt containing a one-way request hash, completion state, revocation result, and timestamps so an interrupted deletion can be retried; the receipt does not retain the account ID or document content.

You can also revoke Jottathing access from your Notion workspace settings.

Contact

Questions about this policy can be sent to support@byaidan.com.