Privacy Policy
Last updated: April 27, 2026
WindoM is a Chrome extension that replaces your new tab page with a personal productivity dashboard. This policy explains exactly what data we collect, what stays entirely on your device, and how we use it. We do not advertise, track, or sell data.
What stays on your device#
The following is stored only in your browser using chrome.storage and is never sent to any server:
- Dashboard settings and preferences
- Todo items and quick links
- Custom background images you upload
- Cached background images from Unsplash (photo history)
- Cached weather data
- Your last-known location coordinates (used for weather only)
- Finance watchlist - the stock tickers and crypto coins you add
- Tab history displayed in the sidebar (read from your local browser, never transmitted)
- Onboarding and dismissal state
Account (optional)#
Creating an account is entirely optional. The dashboard works fully without signing in. If you choose to create an account, we store the following on our servers:
- Your email address and a bcrypt-hashed password
- Your display name
- Your dashboard settings - synced so preferences are consistent across your devices
- Active session records (used to manage login sessions and detect unauthorized access)
You can delete your account and all associated server-side data at any time fromSettings → Account → Delete account. All data is deleted permanently and immediately.
Google Calendar integration (optional)#
If you connect your Google account, WindoM requests the following read-only scopes in a single OAuth consent:calendar.readonly, openid, email, profile. That is the complete list; nothing else is requested.
WindoM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, never used to train any model, and is never read by a human except with your explicit consent, to resolve a problem you have reported, or where the law requires it.
Your Google OAuth access token is stored encrypted at rest on our servers using AES-256-GCM and is used only to make API requests on your behalf. We never share it with third parties.
- Calendar: We fetch your upcoming events (title, time, calendar name) and display them on your dashboard. We do not read event descriptions, attendees, or any calendar outside of the visible list.
Disconnecting Google from Settings → Apps immediately revokes our stored token and deletes all cached data.
Gmail is no longer part of WindoM. Earlier versions could show an unread count and the subject lines of recent mail, which required Google's restricted gmail.readonly scope. That scope is no longer requested and the widget is no longer offered, so no mail data of any kind reaches our servers. Tokens granted under the old consent lose the Gmail permission the next time you reconnect.
Spotify integration (optional)#
WindoM uses a Bring Your Own App (BYOA) model for Spotify. You register a free Spotify Developer app and provide its Client ID in WindoM's settings. This means your music data flows between your browser and your own registered Spotify app - WindoM does not operate a shared Spotify client.
Your Spotify OAuth token is stored encrypted on our servers and is used only to fetch your currently-playing track (artist, title, album art, playback state). We do not access your library, playlists, listening history, or follower data. Disconnecting Spotify immediately deletes the stored token.
Browser permissions#
WindoM requests the following Chrome permissions and uses them as described:
| Permission | Why it is used |
|---|---|
storage / unlimitedStorage | Save your settings, todos, links, cached images, and finance watchlist in your browser. unlimitedStorage is required only for locally uploaded background images. |
tabs | Open, close, and pin tabs from the tab sidebar. Tab titles and URLs are used only locally to populate the sidebar and are never sent anywhere. |
history | Read your recent browsing history to display recent sites in the tab sidebar and provide search suggestions. Only the last 7 days are read, deduplicated by hostname, limited to 10 entries. This data never leaves your device. |
identity | Launch the Spotify PKCE OAuth flow via chrome.identity.launchWebAuthFlow. |
Third-party APIs called directly by the extension#
The following services are contacted directly from your browser. WindoM's servers are not involved in these requests, and we do not share personal data with these services.
| Service | What is sent | Purpose |
|---|---|---|
Unsplash (api.unsplash.com) | Search query / category | Fetch background images for the dashboard |
Open-Meteo (api.open-meteo.com) | Latitude & longitude | Fetch current weather data. No API key, no account. |
Open-Meteo Geocoding (geocoding-api.open-meteo.com) | City name search string | Resolve a typed city name to coordinates for weather |
Nominatim / OpenStreetMap (nominatim.openstreetmap.org) | Latitude & longitude | Reverse-geocode coordinates to a human-readable city name |
| ipapi.co | Your IP address (implicit) | IP-based location fallback - only used if browser geolocation is denied or unavailable |
Quotable (api.quotable.io) | Nothing | Fetch an inspirational quote. No personal data involved. |
Yahoo Finance (query1/query2.finance.yahoo.com) | Stock ticker symbols you added | Fetch real-time stock prices for the Finance widget |
CoinGecko (api.coingecko.com) | Crypto coin IDs you added | Fetch real-time cryptocurrency prices |
Google Favicons (google.com/s2/favicons) | Domain name | Fetch favicon icons for quick links |
DuckDuckGo (duckduckgo.com) | Domain name | Fallback favicon source for quick links |
Each of these services has its own privacy policy. We recommend reviewing them if you have concerns about a specific service.
Data we do not collect#
- We do not use analytics, tracking pixels, or third-party advertising SDKs
- We do not read the content of pages you visit
- We do not collect keystrokes or form input from other websites
- We do not share or sell any data to third parties
- We do not access your email - no mail scope is requested and no mail data reaches our servers
Data sharing#
We do not sell, rent, or share your personal data with any third party for marketing, advertising, or any other commercial purpose. Data is used solely to provide the features you have explicitly enabled in WindoM.
Security#
All communication between the extension and our servers uses HTTPS. OAuth tokens (Google, Spotify) are encrypted at rest using AES-256-GCM with a server-side key. Passwords are hashed with bcrypt (cost factor 12). Authentication uses short-lived JWT access tokens (15-minute TTL) and rotating refresh tokens stored as HttpOnly; Secure; SameSite=None cookies. Refresh token reuse is detected and triggers automatic session revocation.
Children's privacy#
WindoM is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to this policy#
We may update this policy as features change. When we do, we will update the "Last updated" date at the top of this page. Continued use of WindoM after a policy update constitutes acceptance of the new policy.
Contact#
If you have any questions about this policy or want to request data deletion, reach out atyehudabriskman@windom.app.