Chrome拡張機能「メモタス」
プライバシーポリシー

Privacy Policy for the “Memotasu” Chrome Extension (English)

This English text is provided for reference. In case of any discrepancy, the Japanese text above prevails.

↑ 日本語版へ戻る / Back to the Japanese text

1. Single purpose

The extension exists solely to let a user save the page they are viewing, and text they have selected, as a note or task in their own Memotasu account (https://tsk.txt365.org). We use neither the extension nor the data obtained through it for any other purpose.

2. Data we handle

Only when the user explicitly triggers a save (via the context menu or the toolbar popup), we collect, for that tab only: the page title, the page URL, the text the user had selected, and — if the user right-clicked a link, image, video or audio element — that element's URL. This content is saved to the user's Memotasu account, up to 1,000 characters per item. We do not read or transmit anything from pages on which the user has not triggered a save. We do not collect browsing history, form inputs, credentials, payment information, location, contacts, health data, financial data, or personal communications, and the extension contains no analytics and no advertising SDK. Scripts are injected only into the tab the user acted on, and only from the packaged extension.

Stored locally on the user's device (chrome.storage.local), never collected by us: a cache of the user's category names; items queued while offline or signed out, cleared once synced; and a local counter of saved items. All of this is erased when the extension is uninstalled. The extension stores no authentication token and no password, and never obtains or displays the user's name or email address: sign-in state is determined by the browser's existing session cookie for tsk.txt365.org, whose contents the extension does not read.

Server-side: when the extension calls our API, the request necessarily conveys the IP address, user agent, timestamp, request path and response status. We do not accumulate our own access logs; our infrastructure provider Cloudflare, Inc. may record such data temporarily for delivery and security purposes. We do not use it to identify or profile individuals.

Account data: saved items are associated with the user's Memotasu account. The account email and identifier are obtained by the Memotasu web service at sign-in via Google or Apple, and are neither collected nor stored by the extension.

3. How we use it

Solely to (a) store, sync and display the user's saved notes and tasks across Memotasu clients, (b) detect and prevent abuse, investigate faults and keep the service running, and (c) comply with law. We never use it for advertising, targeting, profiling or creditworthiness.

4. Storage and retention

Data is stored on Cloudflare Workers and Cloudflare D1. Saved notes and tasks are retained until the user deletes them or deletes their account. Locally stored data persists until the extension is uninstalled or the user signs out.

5. Sharing

We do not sell, rent or trade user data, and we never transfer it for advertising. We disclose it only to our processors — Cloudflare, Inc. (hosting, database, CDN) and, for sign-in on the web service, Google LLC and Apple Inc. — when required by law, with the user's consent, or to protect life, body or property where consent cannot reasonably be obtained. In a merger or acquisition, data may transfer under this policy, with prior notice to users.

6. Limited Use

Our use and transfer of information received from Google APIs and Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically: we use the data only to provide or improve the single purpose stated above; we transfer it only to provide that functionality, to comply with applicable law, as part of a merger or acquisition, or for security purposes; we never use or transfer it for advertising, including personalized, retargeted or interest-based advertising; and we do not allow humans to read the data, except with the user's affirmative consent, for security purposes, to comply with applicable law, or where the data is aggregated and de-identified.

7. Permissions

contextMenus — to add the “Add to Memotasu” right-click items. activeTab — to read the title, URL and selected text of the tab the user is saving, at that moment only. scripting — to inject the packaged script into that same tab to read the selection and show the result. storage — to keep the items in section 2 on the device. Host permission https://tsk.txt365.org/* — to save items to the user's account and sync sign-in state. The extension contacts no other host.

8. Remote code

The extension executes no remotely hosted code. All executed code ships in the published package.

9. User rights and deletion

Users can delete individual items at any time in Memotasu, delete their account and all associated data from the app settings or by contacting us, and erase locally stored data by uninstalling the extension.

We do not sell user data, do not use it for any purpose other than the single purpose stated above, and do not use it to determine creditworthiness or for lending purposes.

10. Security

TLS in transit, restricted access controls, and organizational, personnel, physical and technical safeguards.

11. Contact

TXT365 LLC, Aoyama Marutake Bldg. 6F, 3-1-36 Minami-Aoyama, Minato-ku, Tokyo 107-0062, Japan — support@txt365.org — https://txt365.org/contact?service=memotas

12. Changes

We may update this policy; material changes will be announced on this page.