To use these add-ons, you'll need to download Firefox.

Log in
Add-on icon

Privacy policy for Max

Max by Winfried

0 Stars out of 5
5
0
4
0
3
0
2
0
1
0
Privacy policy for Max

Last updated: 26 October 2026

Max is a browser extension that replaces the new tab page with a start page you design yourself. This policy says what Max does with your data. In short: what you put in Max stays in your browser, and Max has no account, no tracking, no ads and no analytics.

What Max keeps, and where

Your pages, blocks, tasks, notes, links, settings and the images you add are kept in the storage of your browser, on your own device. They are not synced to a server, not even the browser's own sync. A backup file is only made when you ask for one, and is saved where you choose.

Max can show your bookmarks and your most visited sites in a Links block, and change a bookmark when you ask it to. If you switch it on in a Links block, it can also read your history (to sort links by visits), the tabs you closed lately, your open tabs and, in Chrome, your reading list. All of this is read in the browser and never sent anywhere.

What leaves your browser

Some blocks show information from the internet. Such a block contacts the service it shows, directly from your browser, and only once you add the block to a page:

  • Weather, alerts, feeds and news: the weather service (KNMI, Weerplaza, Luchtmeetnet), api.public-warning.app (an unofficial relay of NL-Alert) for NL-Alert messages, the site of a feed or news source and the servers its pictures are on. For the weather this can include the postcode or place you chose; after a postcode search, a map of OpenStreetMap shows its coordinates.
  • Services you have an account with: Mendix and Azure DevOps get the token or e-mail address you entered for them, and nothing else. They only receive it for the requests the block makes to them.
  • NS travel information and roadworks: these blocks ask toolbox.rocks, a server run by the maker of Max, which holds the key NS asks for and the data of NDW. It receives at most the stations you chose or the map area of the block, and nothing else. With your own NS key, the travel options block asks NS directly.
  • KNMI weather alerts: from November 2026 the KNMI publishes its warnings as open data, which Max reads through toolbox.rocks, as the KNMI Data Platform asks for a key; with a key of your own in the block, Max asks the KNMI itself and the key goes only there. Max fetches the warnings for the whole country there and works out on your own computer which hold for your places: nothing of yours is sent for them.
  • Maps of your places: with "More detail on the maps" switched on in the settings of My places, a zoomed-in map loads the background map of the Dutch Kadaster from PDOK, which so sees which part of the Netherlands you look at.
  • Other blocks: Rijkswaterstaat for traffic, Waze for the car travel map (with the coordinates of the places you chose; the map itself also loads Google reCAPTCHA), ESPN for sports scores and club logos, YouTube for a channel's videos, i.ytimg.com for their still images and youtube-nocookie.com for an embedded video or playlist, Spotify for the title and cover when you add a link to a Spotify block and for its player after you click it, radio-browser.info when you search for a radio station, the station itself when you play the radio (and its site for its logo, if you switch logos on), the status pages of Mendix and OneWelcome, Siemens ProductCERT for Mendix security advisories, GitHub (api.github.com) and cdn.mendix.com for the list of Mendix versions, picsum.photos for the random photo an image block shows until you choose your own and for the photos you can pick as a background, the addresses you enter yourself in an API monitoring block, and ipinfo.io when you add the network information block, to show your public IP address.
  • Link icons: in Chrome and Edge they come from the browser itself; in Firefox from the site of the link.

Like every request on the internet, these services see your IP address. What they do with a request is up to their own privacy policies. Max sends them no identifier of its own and no information about other blocks.

The Chat block (part of Share in Labs, which is off unless you switch it on) sends messages straight to the other browser you connect to, on your own network. No server is involved.

What Max does not do
  • No account and no sign-up.
  • No tracking, no ads, no analytics, no error reporting to a server.
  • Max does not sell your data, does not share it with anyone other than the services above, and does not use it for anything other than showing your blocks.

Deleting your data

In the settings of Max, Clear data removes what Max keeps, in parts or all of it, and can withdraw the access to sites you gave; a backup there takes everything with you first. Removing Max from the browser removes everything Max stored there.

Changes

If Max starts to handle data differently, this policy is updated before that version is published, with a new date at the top.

Contact

Questions about privacy can be sent with the feedback form of Toolbox, a website by the same maker: https://toolbox.rocks/feedback. Mention that your question is about Max.