Privacy, in plain terms.
Extension privacy policy
Updated: October 29, 2026 · Version 0.4.0
NoteHarbor converts chosen ChatGPT conversations, excerpts, attachments and official exports into local Markdown notes. It does not upload them to a NoteHarbor server, invoke an AI model, run analytics or advertising, or execute remote code.
Data processed locally includes chosen chat titles, URLs, message IDs and text; attachments and original download URLs; the vault directory handle and name; folder/language settings; optional inline-button preferences; up to 20 recent save titles and local note links; and automatic-update scope and status. Drafts, known-message baselines for automatic updates and pending conflicts are stored in extension-local IndexedDB. Preferences/status use chrome.storage.local, never chrome.storage.sync. Downloaded capture JSON can contain original signed attachment URLs and should be protected like the chat itself.
A toolbar action shows save controls on the chosen chat. Optional chatgpt.com access can enable Always show: controls identify message positions and IDs on open ChatGPT pages, while text capture and writing follow an explicit save action. Disabling Always show stops future automatic injection; refresh existing pages to remove their controls. The same optional host access separately enables updates only for explicitly opted-in conversation URLs and message ranges. The extension neither inventories the account nor opens other chat tabs. Settings persist across restarts until stopped, the target vault changes or the extension is removed. Conflicts pause updates. Website permission can be revoked.
Attachment requests go to their original supported ChatGPT/OpenAI source. The optional images.openai.com fallback is used only after permission is granted. Source URLs can carry authorization parameters; these are not forwarded to NoteHarbor servers. The extension does not extract or store account cookies, passwords or session tokens. The ChatGPT page itself follows that service's network and privacy policies.
Locally chosen supplementary files are saved into the conversation’s attachment folder and linked from its personal note. Those original bytes are written only to the selected vault, not uploaded or added to capture drafts.
Folder writes require browser authorization and stay within the chosen vault. Saved files include transcripts, attachments, personal notes, indexes, versions, conflicts and recovery copies. Your own vault cloud-sync settings still apply. Browser folder access can be revoked.
Clear local draft removes the current captured conversation draft; saved vault files remain. Closing the workspace releases in-memory historical imports, while captured drafts, preferences and conflicts can remain locally. Uninstalling clears extension storage, not saved vault files and backups.
Data is not sold, used for advertising or credit decisions, or processed for purposes unrelated to archiving. The operator and publisher is HorizonSail. Privacy and support contact: noteharbor@horizonsail.app. Changes to features or data practices will be reflected in this policy and its date. This policy describes NoteHarbor 0.4; store submission or publication status is determined by the actual store listing.
Messages you choose to send to the support address are forwarded through Cloudflare Email Routing to an existing Gmail inbox for responses and reasonable follow-up. You may request deletion of correspondence through that address, except for records that must be retained by law. The extension does not automatically email conversations or files.
Limited Use
NoteHarbor complies with the Chrome Web Store User Data Policy, including the Limited Use requirements, when handling information received through Chrome or Google APIs. Data is used only for the local conversation-saving and management features disclosed here; it is not sold or transferred for advertising or unrelated purposes. The extension does not upload chat text to HorizonSail, so we cannot read your chats through the extension. If you explicitly consent and provide specific content for technical support, it is read only to handle that request.
Website and export converter
Updated: October 30, 2026. This section covers noteharbor.horizonsail.app separately from the extension policy. Operator: HorizonSail. Contact: noteharbor@horizonsail.app.
Selected export files
Bundled code processes selected JSON/ZIP files in browser memory. The converter does not send chosen chat content, titles, filenames or attachments to a NoteHarbor application server or model API, and does not persist imported chats in browser storage. Clear files or close the page to release its references; this is not a secure memory-erasure guarantee. Downloaded and saved files remain until you remove them.
Local folder access
Folder saving requires browser authorization. The local index records source IDs, paths and content hashes. Moved-source recovery reads Markdown frontmatter only inside the chosen vault, bounded to 10,000 entries and 32 levels; hidden/configuration and generated folders are excluded. Your own vault cloud-sync settings still apply.
Hosting and support
Loading pages or downloads contacts Cloudflare, our hosting provider. Request/security metadata such as IP address, request headers, URL and time may be processed in hosting or security logs. Local conversion does not mean the website has no hosting logs. We add no application analytics, advertising scripts or third-party fonts. See Cloudflare’s privacy policy. Support email follows the routing and correspondence rules in the extension policy above.