Privacy policy for Time Web Extension
Time Web Extension by Jonah Maroszek
Privacy
Time Web Extension has one purpose: it adds the current website's address to the browser window title so the local Time desktop app can identify the website.
DATA ACCESSED AND LOCAL HANDOFF
On an ordinary top-level HTTP or HTTPS page, the extension reads only:
- the current page origin;
- the current page title.
It writes only the current top-level page title. The value added to that title is exactly: location.origin + "/"
The extension does not read the page path. It never includes paths, query parameters, URL fragments, or credentials in its marker. Every page of one website produces the same marker, so the marker distinguishes sites from each other and nothing finer.
This title marker is a deliberately local handoff. It makes the site origin available to the operating system and to the local Time desktop app, which already reads the foreground browser title. Time validates the marker, derives the normalized website domain, and immediately discards the raw origin. Time's separate "Store window titles" setting determines whether the ordinary page title is retained.
Browser stores classify this local handoff as handling browsing data even though nothing is sent over a network. Firefox therefore declares "browsingActivity" for the origin and "websiteContent" for the page title it reads and preserves.
DATA NOT OTHERWISE ACCESSED OR RETAINED
The extension does not read page-body text, forms, passwords, cookies, browser history, browser storage, network traffic, downloads, clipboard contents, iframe URLs, or iframe contents.
It does not persist browsing data; send it over a network; upload it to the developer; or sell or share it with advertisers, data brokers, or other third parties. It has no storage, network requests, native messaging, remote code, analytics, advertising, telemetry, or crash-report uploads. It does not run in private or incognito windows.
SITE-ACCESS WARNING
Your browser may warn that this extension can read and change data on websites you visit. Broad site access is required so the extension can update the title automatically on ordinary HTTP and HTTPS pages. That warning describes what a content script with this access could technically do, not the narrower behavior implemented here.
The source and final package are designed to be inspectable. Automated package checks reject named browser permissions, unexpected host scope, background processes, storage and network APIs, remote resources, telemetry, and divergent Chromium/Firefox functional code. Firefox's data declarations describe the local handoff above; they do not grant an additional runtime API capability.
MARKER SCOPE AND THE OPERATING-SYSTEM BOUNDARY
Paths, query strings, and fragments are the parts of a URL that carry reset tokens, document names, patient identifiers, account identifiers, and other private information. The extension does not read or transmit any of them. The marker is the site origin, which is the least it can disclose and still let Time tell one website from another.
That origin is intentionally placed in the browser title. It is therefore visible to the operating system and to other software capable of reading window titles; it is not confined inside the browser. This is why the marker is limited to the origin.
Private browsing is excluded. Time desktop v1 is designed to validate the marker, derive the normalized website domain, and discard the raw origin. Time's separate "Store window titles" setting determines whether the ordinary clean page title is stored and must not disable domain-based Website rules or exclusions. Page titles are page-authored text and can themselves be revealing, which is why that setting is off unless you turn it on.
LIMITED USE
Browsing data is handled only to provide the extension's single purpose: local website identification for Time. It is not used for advertising, analytics, profiling, eligibility decisions, or any unrelated purpose. This use complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
UNSUPPORTED PAGES
The extension does not run on local files, browser-internal pages, extension pages, browser-store pages where injection is prohibited, protected pages, unsupported protocols, subframes, or private-browsing pages. The absence of a marker on those pages is expected.
CHANGES AND CONTACT
This policy describes the extension as currently published, and is updated in the same change that alters the extension's behavior. The published version is generated from the extension's source repository, so the policy and the code it describes are traceable to the same revision.
Full policy also published at: https://trackwithtime.com/extension/privacy/
Questions about this policy may be sent to: support@trackwithtime.com