“Save to Geneziz” Extension: Privacy Policy

The short version

The extension saves things you choose to save — a web page, your own X (Twitter) bookmarks, your own Instagram saved posts, your own Reddit saved posts, your own TikTok favorites, your own Cosmos saves — into the Geneziz knowledge base running on your own computer.

• It sends your saved content only to your own computer (a small local service at 127.0.0.1 that the Geneziz desktop app runs). It does not send your content to Geneziz's servers, to any analytics service, or to any advertiser.
• It never reads your browser cookies (it does not use the cookies API and never reads document.cookie).
• It collects no analytics, no telemetry, and no advertising identifiers.
• It does not track your browsing history.

The one exception — and only when you choose to use it — is Geneziz's cloud AI features (categorize / enrich / ask / OCR), which are part of the desktop app, not the extension. Those are covered in the main privacy policy.

What the extension collects

The extension only ever handles content you explicitly save:

The extension does not scrape pages you are not actively saving, does not read pages in the background, and does not monitor what you type.

Where your data goes — your own computer

Everything you save is sent to a small local service (a “sidecar”) that the Geneziz desktop app runs on your own machine, at the loopback address http://127.0.0.1:43117. That local service writes your saves into your local knowledge base (markdown files, images, and a local search index on your disk).

• The sidecar accepts connections only from your own computer (127.0.0.1 / localhost); it refuses any connection from another machine or the network.
• A plain page save triggers zero outbound network calls — the page text and images you captured are written straight to disk. Nothing leaves your machine.
• To fetch the media (photos/videos) for an X / Instagram / Reddit / TikTok / Cosmos backfill, the local service downloads those files from the same site you saved them on (the site's content network) so it can store them locally — exactly the same media your browser already loaded.

The extension authorizes each save to your local app with a single bearer token. That token is generated on your computer, stored only in the extension's local storage, and is never sent anywhere except your own 127.0.0.1.

How your social-media saves are fetched (cookies)

This is the part worth being precise about, because it's easy to misread.

On x.com, instagram.com, reddit.com, tiktok.com, and cosmos.so, the extension works inside your logged-in browser session — the same session you already use to view those sites. To fetch your own saved items, it asks the site for them using the same authenticated requests the site already makes for you when you browse. In other words, the extension reads your saved content the same way your browser does when you open the page yourself.

What this means concretely:

• The extension does not read your cookies. It never uses the browser's cookies API and never reads document.cookie. It does not store your cookies anywhere and never sends them to your local app, to Geneziz, or to any third party.
• Your session cookies stay with the site they belong to. They are used only in-page, by the site itself, to return your data.
• The extension only ever fetches your own saved content — never anyone else's, and nothing you haven't saved.

What is stored locally in the extension

The extension keeps a small offline buffer (in the browser's IndexedDB) so a save isn't lost if your local app is briefly closed. This buffer holds the item you just saved (URL, title, text, images) and is deleted as soon as your local app confirms it received it. The buffer is capped (500 items or 200 MB) and evicts the oldest items first if it ever fills. It never leaves your browser except to be delivered to your local app.

The extension also stores, in its local storage: the bearer token to your local app, your capture preferences, and a few small flags (e.g. your Instagram username, learned from the page, so it can open your Saved page). None of this is transmitted off your machine.

Permissions, and why each one

No analytics, no advertising, no tracking

The extension contains no analytics SDK, no telemetry, no advertising, and no tracking. It does not set advertising or tracking cookies. It does not collect device fingerprints. It does not measure your behavior for anyone.

Third parties

The extension shares data with no third party. The only services it contacts are:

1. Your own local Geneziz app at 127.0.0.1 — your saves.
2. The site you are saving from (x.com, instagram.com, reddit.com, tiktok.com, or cosmos.so) — to fetch your own saved content and media, using your existing logged-in session.

It does not contact Geneziz's servers, Google Analytics, Sentry, or any other third-party service. (When you uninstall, your browser may open a Geneziz page — that is a normal browser navigation, not data transmission.)

Your choices

• Turn off a source: don't run that backfill (X / Instagram / Reddit / TikTok / Cosmos). The extension does nothing on those sites unless you start an import or save something yourself while browsing.
• Turn off the X auto-capture: the only thing the extension does “automatically” is file a tweet into your local KB when you click X's bookmark button. You can disable auto-sync in the extension options.
• Disconnect the extension: remove the bearer token in the extension options, or uninstall the extension. Your already-saved knowledge base in the desktop app is unaffected.
• Delete your data: your saves live in your local Geneziz data directory — delete them there (or run geneziz reset). The extension's local buffer is cleared on uninstall.

Children's privacy

Geneziz is not intended for users under 13. The extension does not knowingly collect data from children.

Changes

We may update this policy; the “Last updated” date above reflects the most recent revision.

Contact