What the extension sends — and when
Lookups, badges and the search palette run entirely against a catalog snapshot
stored on your device; they make no network calls. Data leaves your browser only when
you press “Request review” on a tool that isn’t in the catalog. That request contains:
a key derived from the page’s address (domain, Chrome Web Store id or GitHub repo) or
the name you typed; the page title or your search text; and a random anonymous id used
only to avoid counting the same request twice.
The daily catalog update
Once a day the extension downloads the public catalog file
(stillworks.dev/snapshot.json). This is an ordinary file download — no identifier,
cookie or browsing data is attached to it.
How long we keep it
Review requests are stored for up to 60 days in Cloudflare KV, then expire
automatically. Your IP address is never stored in readable form — only a truncated
one-way hash, used solely for basic rate-limiting. Votes on the weekly page work the
same way, tied to an anonymous cookie.
What we never do
No tracking across sites, no advertising, no third-party analytics, no selling or
sharing of your data. The random id is a de-duplication token for review requests, not
a profile — it is never linked to your identity.
Contact
Questions or a data request? Email
[email protected] and we’ll reply within
24 hours.
Changes
If this policy changes we’ll update this page and the date below.
Last updated 2026-07-28.