Privacy policy
Last updated: 15 October 2026
This policy explains how (“we”) handles information in the Chrome extension “Leafback” (the “extension”) and its website (the “site”).
1. Your diary data
Diary entries, photos, audio, labels and settings you import are stored only in the extension’s own storage inside your browser. They are never sent to our servers, and we cannot see or collect them. Removing the extension removes this data from your browser.
2. Network connections
The extension connects to the internet only in the following cases. In each case your browser asks for permission when you first use the feature.
- AI features (optional): only when you set up an AI service (Anthropic, OpenAI or OpenRouter) with your own API key, review what will be sent and agree, the text of the entries you selected is sent directly to that service. It does not pass through us. The AI service’s own privacy policy applies to that content. Your API key is stored only in your browser.
- License checks: when a customer enters a license key, and about once a week afterwards, the license key and a device name (for example “Chrome Win32 1a2b3c4d”) are sent to Polar (polar.sh), our reseller, to confirm the key is valid. No diary content is sent.
The extension does not collect analytics or advertising data.
3. Purchases
The paid version is sold through Polar, which acts as merchant of record. Polar collects and manages your name, email and payment details under its own privacy policy. We receive customers’ email addresses and order details from Polar only as needed to manage sales and answer support requests.
4. Launch sign-up on the site
The email address and optional answers you submit through the sign-up form are used only to tell you about the launch and to improve the product, and are never sold or shared. They are stored in a database run by Cloudflare, which hosts this site. The form uses Cloudflare Turnstile to block automated sign-ups, which sends some browser information to Cloudflare. The English pages also use Google Fonts to display text, so your IP address and similar information are sent to Google when those pages load (the Japanese pages use fonts hosted on this site). To unsubscribe or have your data deleted, contact us below.
5. Contact
6. Changes
We will post any changes to this policy on this page.