Privacy Policy
The short version
- Jotato has no server. The extension makes no network requests of any kind — no API calls, no telemetry, no analytics, no remotely loaded code.
- Your notes never leave your browser. Everything you capture is written to your browser's local extension storage on your own computer. We cannot read it, and neither can anyone else.
- There is no account and nothing to sell. No sign-up, no email address, no advertising, no third-party trackers. We collect no personal information, so there is none to share, sell or lose.
This policy explains exactly what Jotato stores, where it lives, and which browser permissions it needs in order to work. It applies to the Jotato browser extension for Chrome and Chromium-based browsers such as Microsoft Edge. It is written to be verified rather than trusted — every claim below corresponds to something you can check in the extension's behaviour.
1Who we are
Jotato is developed by AI Genie Studio. It is a free tool. We are the data controller for the purposes of this policy, in the narrow sense that we publish the software — in practice we hold no data about you at all, because none of it reaches us.
2What Jotato stores, and where
Jotato stores what you deliberately capture, so it is still there when you come back to a page. All of it is written through your browser's extension storage API, on your own machine.
| What | Where it is stored | Leaves your device? |
|---|---|---|
| Text you clip, images you paste, video frames you take with Grab frame, and full-page captures you take with Screenshot | Local extension storage (chrome.storage.local) |
No |
| Your own writing — takes, questions, digest, asides, tags | Local extension storage | No |
| Subtitle text pulled from a video you are watching, and its timestamp | Local extension storage | No |
| The title and URL of a page you took notes on — used as the record's key and shown in your history list | Local extension storage | No |
| Your saved records (history), and the timestamps of when they were saved | Local extension storage | No |
| The signature you optionally type onto the spine, shown on share cards you generate | Local extension storage — deliberately kept out of synced storage, because it is the one thing you type that could identify you | No |
| Interface preferences only — whether the sidebar is open or minimised, its position and size, article/video capture mode, whether to attach the on-screen subtitle when you grab a frame, your export format, share-card ratio, and the mascot toggle. No text you wrote, and nothing that identifies you. | Browser-synced extension storage (chrome.storage.sync) |
See section 3 |
Jotato records the page URL only for pages where you actually took a note. It does not read, log or store your browsing history, your open tabs, or pages you merely visited.
3The one exception: your browser's own sync
Your settings — and only your settings — are stored in
chrome.storage.sync, so that the sidebar behaves the same
way on your other computers. If you are signed into your browser with
sync enabled, your browser copies that small settings object through
your own Google (or Microsoft) account. That transfer is performed by
your browser, under your account, governed by your browser vendor's
privacy policy — not by us, and not to us.
Nothing you type is ever placed in synced storage. Clips, screenshots, subtitles, your writing, your history — and the signature you can put on the spine — are all held in local storage, which never syncs. The signature is kept local deliberately: it is the one field you fill in that could name you, so it stays on the machine you typed it on. What syncs is a small object of interface preferences: booleans, a couple of enum values, and panel coordinates. If you turn browser sync off, nothing Jotato writes leaves your device at all.
4What Jotato does not do
- No network requests. The extension contains no
fetch,XMLHttpRequest, WebSocket or beacon calls. It has no backend to call. - No analytics or telemetry. No usage statistics, no crash reporting, no event tracking, no session recording, no third-party SDKs.
- No accounts. Nothing to register, no email address collected, no password, no identifier assigned to you.
- No remote code. All code and fonts ship inside the extension package and are reviewed by the store. Nothing is fetched or evaluated at runtime.
- No advertising, no profiling, no data brokers. We do not sell, rent, trade or transfer your data — we do not have it.
- No use of your data to determine creditworthiness or for lending purposes.
5Permissions, and why each one is needed
Chrome shows a broad-sounding warning when you install Jotato. Here is what each permission is actually for. Being able to run on a page is not the same as collecting anything from it: Jotato reads only what you select or capture, and everything it reads stays on your machine.
| Permission | Why Jotato needs it |
|---|---|
storage, unlimitedStorage |
To keep your notes on your device between visits. The unlimited quota is needed because saved screenshots are large; without it a handful of frames would fill the default allowance. |
Access to all websites (<all_urls>), activeTab |
Jotato is a sidebar you can open on any page — a video, an article, a PDF viewer — so it cannot know in advance which sites you will use it on. This access is what lets it draw the panel, read the text you have selected, and read the subtitle currently on screen. It is used locally, at the moment you act, and never transmits anything. |
tabs |
To send "open the sidebar" and "clip the selection" to the tab you are looking at when you click the toolbar icon or press the keyboard shortcut, and to identify that tab when you take a screenshot. Jotato does not enumerate or record your open tabs. |
downloads |
To hand the export file to your browser's downloader when you choose to export. The file is generated inside the extension and saved to your computer; it is not uploaded anywhere. |
Screenshots
Jotato has two separate capture actions, and both fire only at the moment you press them.
- Grab frame (video mode) draws the current frame of the video element you are watching onto a canvas inside the page. It sees the video and nothing else, and the image is downscaled to at most 480 pixels wide before it is stored.
- Screenshot captures the visible area of the current tab — everything on screen in that tab at that moment, not just the article. Jotato hides its own sidebar first so the panel does not appear in the image. Use it deliberately: if something private is on screen, it will be in the capture.
Jotato never captures in the background, on a timer, or without an explicit action from you. Neither action can reach another tab, another window, or anything outside the browser. The resulting image is stored locally alongside your note.
6Exports, copying, and files you create
When you export a record as a Word document or as Markdown, or copy a note to your clipboard, the content is assembled inside the extension and handed to your operating system — to your Downloads folder, or to your clipboard. Nothing passes through us. What you then do with that file, and any service you choose to paste it into, is outside this policy and governed by that service's own terms.
7Third-party links
The sidebar contains a small number of ordinary links out to other sites — for example a support link to Buy Me a Coffee. Nothing is sent when the link merely sits there; only if you click it does your browser visit that site, at which point that site can see your visit in the normal way and its own privacy policy applies. Jotato passes no information about you or your notes along with the click.
8Keeping and deleting your data
Because your notes live on your computer, you control their lifetime entirely:
- Delete an individual clip, note or saved record from inside the sidebar at any time. Deletion is immediate and permanent — there is no server-side copy and no trash to restore from.
- Jotato keeps your 80 most recent saved records and drops the oldest beyond that. To save space, images are kept only in the 10 most recent records; older records are stripped of their images automatically and flagged as such in your history list, while the text of every clip, take, digest and tag is kept in full.
- Uninstalling the extension removes all of its local storage, and with it every note Jotato held. Export anything you want to keep first.
- Your synced settings are removed through your browser's own sync controls.
9Your rights
Privacy laws including the GDPR and the CCPA give you rights to access, correct, export and erase personal data a company holds about you. We hold none: there is no database, no account record and no log with your name, address, email or activity in it. In practice this means you already have direct access to all of your data — it is in your browser, and the controls in section 8 let you export or erase it without asking anyone's permission. We have never sold or shared personal information, and we do not.
10Children
Jotato is a general-purpose study tool and is not directed at children under 13. It knowingly collects no personal information from anyone, of any age.
11Security
Jotato's security model is that there is nothing in transit and nothing held remotely to breach. Your notes are protected by your own device and browser profile — anyone with access to your unlocked computer and browser profile can read them, in the same way they could read your bookmarks or your saved documents. Jotato does not add a separate password or encryption layer on top of that.
12Changes to this policy
If Jotato ever gains a feature that changes any of the above — an optional cloud sync, for instance — this page will be updated before that feature ships, with a new effective date, and the change will be described in the extension's store listing. Material changes to how data is handled will never be applied retroactively to notes already on your device.
13Contact
Questions about this policy, or about anything Jotato does with your data: hello@aigeniestudio.io.