Soaper Note Receiver - Privacy Policy

Last Updated: July 26, 2025

This Privacy Policy describes how the Soaper Note Receiver Chrome Extension ("the Extension") collects, uses, and protects your information. By using the Extension, you agree to the practices described in this policy.

1. Data We Collect

The Soaper Note Receiver Chrome Extension is designed with privacy at its core. It does not track your browsing history, collect personal information from the websites you visit, or sell your data.

The Extension primarily handles notes that you explicitly "beam" from your paired Soaper mobile application. The data involved includes:

• User-Beamed Notes: The text content of notes sent from your Soaper mobile app.
• Extension Pairing Data:
  • Unique Extension ID: A randomly generated ID specific to your Extension installation. This ID allows your mobile app to identify and send notes to this specific browser instance.
  • AES Encryption Key: A unique, randomly generated 256-bit AES key. This key is stored locally within your Chrome browser's local storage and is used solely for decrypting notes received from your paired mobile app.
  • Computer Name: A dynamically generated name for your browser instance (e.g., "Windows Chrome - 123456789012345678"). This is used for identification within the Soaper ecosystem and is not personally identifiable.
• Connection Status & Basic Statistics: Non-personally identifiable data related to the connection status with the Firebase Realtime Database (e.g., connection established/lost, bytes sent/received for connection management). This is standard operational data for the Firebase service.

2. How We Use Your Data

• To Enable Note Beaming: The primary purpose of the Extension is to receive, decrypt, and display notes beamed from your paired Soaper mobile application.
• Local Storage: Your unique Extension ID, AES key, and computer name are stored locally within your Chrome browser's local storage. This data is essential for maintaining your pairing and ensuring secure decryption of notes.
• Note Insertion & Copying: Received notes are copied to your clipboard and, if possible, automatically inserted into the active text field on the current webpage.
• Notifications: With your permission, the Extension uses Chrome's notification system to alert you when a new note is received. You can control this preference within the Extension's popup.
• Connection Management: The connection status and basic statistics are used internally to manage the stability and reliability of the Firebase connection for note reception.

3. Data Sharing and Disclosure

The Soaper Note Receiver Extension does not share, sell, or rent your personal data or note content with any third parties.

Notes are transmitted via Firebase Realtime Database infrastructure. However, these notes are **end-to-end encrypted** by your Soaper mobile app using your unique AES key *before* being sent to Firebase, and then decrypted by this Extension *after* being received. This means Firebase only handles encrypted data and does not have access to the plain text content of your notes.

The Extension communicates with the Firebase Realtime Database (https://soaper-350c1-default-rtdb.firebaseio.com and its associated WebSocket connections for real-time updates) for the sole purpose of transmitting your encrypted notes between your paired devices.

4. Data Security

We are committed to protecting your data. The Extension uses AES-256 encryption for all notes beamed from your mobile app to this browser. Your unique encryption key is generated and stored locally in your Chrome browser's local storage, never transmitted to our servers or third parties in plain text.

While we strive to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

5. Permissions Used

The Extension requests the following Chrome permissions:

• "storage": Required to store your unique Extension ID, AES encryption key, computer name, and notification preference locally within your browser. This data is essential for the Extension's functionality and secure operation.
• "activeTab": Required to get information about the currently active tab (e.g., its URL and ID) to send notes to it or paste into it.
• "notifications": Required to display system notifications when a new note is received, if enabled by the user.
• "tabs": Required to query for the active tab and to create a hidden tab for clipboard fallback if direct pasting is not possible.
• "scripting": Required to inject the content script into web pages to facilitate pasting notes into active text fields and copying notes to the clipboard.
• "host_permissions": [""]: This broad permission is necessary because the Extension's core functionality is to insert beamed notes into text fields on *any* webpage the user is actively viewing. Without this, the Extension would be severely limited in its utility for quickly pasting notes into various online forms, editors, or communication platforms. The Extension explicitly avoids injecting content scripts into restricted Chrome internal pages (e.g., chrome://settings, chrome-extension:// URLs) to adhere to browser security policies.

These permissions are used solely for the stated functionalities and are not exploited for any other purpose, such as tracking, data mining, or advertising.

6. Data Retention

The Extension does not retain your beamed notes persistently once they are displayed and copied. The latest note is shown in the popup. Pairing data (Extension ID, AES key, computer name) is retained in your local Chrome storage until you clear the pairing manually or uninstall the Extension.

7. Your Choices

• Notifications: You can enable or disable notifications at any time via the toggle switch in the Extension's popup.
• Clear Pairing: You can clear your pairing data at any time via the "Clear Pairing" button in the Extension's popup, which will generate a new Extension ID and AES key.
• Uninstall: You can uninstall the Extension at any time through Chrome's extension management page. Uninstalling will remove all locally stored data associated with the Extension.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the Extension's files and updating the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Extension after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

Since the policy is embedded within the Extension, updates will be delivered through Chrome's automatic extension update mechanism. You will receive the updated policy when the Extension is updated to a new version.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Support@soaper.ai