penciled for the browser doesn't collect, send or sell any data. In short: nothing leaves your browser.

What's stored, and where
- Your highlights and notes, with the address and title of each page you highlight on. They're kept in your browser's extension storage, on your computer only, and are deleted when you uninstall penciled.
- Your settings: the toolbar theme, whether selecting text opens the toolbar, and your colors. If you're signed in to Firefox with sync turned on, Firefox syncs them to your other computers, as it does for any extension's settings.
- The sites you turned penciled off on, on your computer only.

What isn't
- penciled makes no network requests. It has no servers, analytics, tracking, ads or accounts.
- It doesn't read or keep anything from the pages you visit, except the text you highlight and a little of the text around it, which it needs to find the highlight again.

Permissions
- Access your data for all websites: so you can highlight on any site. penciled reads a page's text to find your highlights on it, and adds its toolbar on top. The page's own content isn't changed: highlights are drawn by the browser.
- Storage and unlimited storage: to keep your highlights and settings, without a size limit.

Your control
Export or delete your highlights at any time from the notes page. Turning penciled off for a site stops it from running there at all.

Open source
penciled's source code is public, so anyone can check these claims: https://github.com/marcellosso/penciled/tree/main/apps/extension

Changes
If this statement ever changes, the new version will be published at https://penciled.org/extension/privacy/, with its date. Questions: https://github.com/marcellosso/penciled/issues