Privacy Policy
Last updated: October 2026

This policy applies to the Shelf browser extension and the shelf web pages
("Shelf", "we", "our"). By using Shelf, you agree to this policy.

1. OVERVIEW

Shelf saves things you find online into collections you curate. Shelf works
entirely on your own device unless you choose to create an account. Without an
account, nothing you save ever leaves your browser.

If you create an account, your saved items and shelves are stored in Google
Firebase so they can sync between your devices. If you choose to publish a
shelf, that shelf becomes publicly readable by anyone. We do not sell, rent or
trade your data, and we do not run advertising or analytics.

1. USING SHELF WITHOUT AN ACCOUNT

Saved items, shelves, notes, tags, uploaded images and your display preferences
are stored only in your browser's local storage on your device. None of it is
transmitted to us or to anyone else.

Shelf reads the title and URL of your open tabs to show them in the Tabs panel,
and reads the current page's title and preview image when you save it. This
happens only when you take an action, is held in memory, and is never
transmitted.

1. IF YOU CREATE AN ACCOUNT

Accounts are optional and exist to sync your library across devices and to let
you publish shelves. Creating one means the following is stored on Google
Firebase servers:

• Your email address and password — handled by Firebase Authentication. We
  never see your password.
• Your saved items — URL, title, note, tags, creator, year and preview image URL.
• Your shelves — names, descriptions, icons and which items they contain.
• Your profile — display name, handle, bio and avatar.

Large locally uploaded images are not uploaded; they stay on your device.

1. INFORMATION THAT IS PUBLIC

Some information is deliberately public. This only happens through actions you
take.

• Published shelves. When you make a shelf public it can be read by anyone,
  with or without a Shelf account, including through a shared link and the
  public web pages. This includes the shelf's name, description and every item
  in it, with your notes.
• Your public profile. Your display name, handle, bio and avatar are readable
  by anyone and appear in Explore search results.
• Who you follow. Your list of followed accounts is readable by others.

Making a shelf private again removes it from public view. Your email address is
never published.

1. THIRD-PARTY SERVICES

Shelf contacts the following services. We send them no more than is described
here.

• Google Firebase (Authentication and Firestore) — stores your account and
  synced data. Used only if you create an account.
• Microlink — when you save a page, its URL is sent to retrieve the page's
  title and preview image.
• Spotify, YouTube, Vimeo and SoundCloud — contacted to fetch cover art and to
  display embedded players for items you have saved.
• Google favicon service and Clearbit — contacted to display site icons next to
  saved items.
• Google Fonts and unpkg — serve the fonts and icons used in the interface.

Shelf contains no analytics, no tracking pixels and no advertising.

1. PERMISSIONS
2. tabs — to list your open tabs in the Tabs panel so you can save them.
3. activeTab and scripting — to read the title and preview image of a page at
   the moment you save it. Shelf requests no standing access to the sites you
   visit.
4. storage — to keep your library on your device.
5. contextMenus — to add the right-click save options.
6. YOUR RIGHTS

You can export your entire library to a file at any time from the Export menu,
and clear all local data from Clear All.

If you have an account, you may request access to or deletion of your stored
data by emailing us. We will action deletion requests within 30 days.
Unpublishing a shelf removes it from public view immediately.

If you are in the EU or UK you have rights of access, rectification, erasure,
restriction, portability and objection under the GDPR, and the right to
complain to your local data protection authority.

1. DATA RETENTION

Local data stays on your device until you delete it or remove the extension.
Account data is kept until you ask us to delete it or delete your account.

1. CHILDREN'S PRIVACY

Shelf is not directed at children under 13, and we do not knowingly collect
data from them.

1. CHANGES TO THIS POLICY

If this policy changes materially we will update the date above and note the
change in the extension's release notes.

1. CONTACT

Questions, access requests or deletion requests: contact@leifpodhajsky.com

Data controller: Leif Podhajsky, Berlin, Germany.