Privacy Policy

Last updated: August 2026

The short version

The Anahera Aloft extension does not track you and does not send your data anywhere. Everything it captures, the pages you save to your canvas, stays on your device, in your own browser. The extension sends no analytics, no telemetry, and no page content to us or to any third party. There is no account, no login, and nothing to phone home. That is the whole point of a spatial memory that is yours: what it knows about you, it keeps on your machine.

Who we are

Anahera Aloft is a Chrome extension that connects your browser to the Anahera spatial canvas web app. The extension is developed by Anahera Design Research Lab. The Anahera web app is hosted at anahera.space (or your own deployment).

What the extension captures

The extension collects a small, fixed set of fields per captured page. What is collected depends on how the page is captured.

Auto-capture (pages you dwell around 15 seconds or more, with auto-capture enabled):

Manual clip (Ctrl+Shift+Y, or the right-click "Add to Anahera" menu) collects the same fields — page URL, title, and favicon. It reads nothing from the page.

A note is any text you choose to write on a card yourself, inside the canvas. Notes are authored by you, never read from a page.

That is the complete list. This data is transferred in-browser via postMessage directly to the Anahera canvas running in the side panel iframe, it never travels over the network to any server. It is stored in your browser's localStorage only, and never leaves your device.

What we do NOT collect

• Any page content at all — no meta description, no page body text or HTML (the extension reads only the tab's URL, title, and favicon)
• Form inputs, passwords, or credentials
• Cookies or authentication tokens
• Browsing history (beyond the pages captured during active extension sessions)
• Personal information of any kind beyond what is listed above
• Data from incognito/private browsing windows, both auto-capture and manual clip are blocked on incognito tabs (see below)
• Pages on known banking and sign-in sites are never auto-captured (see "Sensitive sites" below)

How data is stored and transmitted

• Never leaves your browser. Captured page data travels from the extension to the Anahera canvas exclusively via postMessage, an in-browser channel between the extension side panel and the canvas iframe. No HTTP request is made to any server with your captured data. It is stored in localStorage on your device and nowhere else.
• The host serves static files only. The Anahera canvas is a static web app. The host serves the compiled HTML, JavaScript, and CSS bundle when the side panel opens, the same as loading a page from a CDN. The host's servers receive no artifact data, no URLs you visit, and no personally identifiable information.
• No third-party sharing of captured data. We do not sell, share, or transmit your captured page data (URLs, titles, favicons) or the notes you write to any third party. It stays in your browser's localStorage.
• The extension sends no analytics at all. The Anahera Aloft extension, including its background service worker and the canvas running in its side panel, sends no telemetry or analytics of any kind. No install event, no usage event, nothing. This is enforced in code, not just configuration. Product analytics runs only on the anahera.space website when you visit it directly in a browser tab, outside the extension, see "Analytics on the website" below.

Sensitive sites

Anahera never auto-captures pages on known banking and sign-in sites. The background service worker checks every page against a denylist (major banks, plus the sign-in pages of Google, Microsoft, Apple, GitHub, and GitLab) before it would ever enqueue an auto-capture, and skips them. This covers the dwell-based auto-capture and the tab data (URL, title, favicon) the browser exposes.

This denylist is a safeguard, not a guarantee: it cannot know every bank or login page in the world. If you deliberately clip a page yourself (Ctrl+Shift+Y or the right-click menu), that is treated as your explicit choice and the clip is saved locally like any other, the denylist only governs automatic capture, never your own manual action.

Incognito browsing

By default, Chrome does not run extensions in incognito/private windows at all, so Anahera Aloft captures nothing there unless you explicitly grant it incognito access in chrome://extensions. Even if you grant that access, Anahera captures nothing on incognito tabs: both auto-capture and manual clip are blocked, the background service worker skips any tab flagged incognito before it enqueues a capture, whether the capture was automatic or one you triggered.

Review before it lands: the inbox

Auto-captured pages do not appear on your canvas automatically. Each one is held in a review inbox on your device, kept off the canvas, until you decide what to do with it. From the inbox you can:

• Approve a capture, and it moves onto your canvas and stays.
• Dismiss a capture, and it is deleted from your browser's local storage.

This gives you a direct, per-item say over what is ultimately retained. While a capture waits for review it is stored only in your browser's localStorage, exactly like an approved one, and, whether you approve it or dismiss it, it is never sent off your device at any stage. Manual clips (Ctrl+Shift+Y or the right-click "Add to Anahera" menu) are your own deliberate action, so they skip the inbox and are placed on your canvas directly.

Your controls

• Review inbox: Every auto-captured page waits in the inbox for you to approve or dismiss before it lands on your canvas. Dismissing deletes it from local storage. Manual clips skip the inbox by design.
• Auto-capture on/off: Toggle auto-capture at any time from the panel header ("auto-capture · on / auto-capture off · enable").
• Consent choice: On first install, you are shown a consent screen explaining what auto-capture does. You can decline. If you decline, auto-capture remains off until you explicitly enable it.
• Removing the extension: Uninstalling Anahera Aloft stops all data collection immediately. Data already on your canvas remains in your browser's local storage until you clear it (Settings → Reset workspace in the Anahera web app).

The extension has no analytics (only the public website does)

The Anahera Aloft extension itself has no analytics of any kind. No install tracking, no usage tracking, nothing measured about you or the pages you capture. This section is not about the extension. It is only about the separate thing you are reading right now: the public anahera.space website, the ordinary marketing and help pages you open in a normal browser tab.

Those public web pages use a privacy-friendly measurement tool to count basic, anonymous visits, for example how many people viewed a page and whether a visitor came back. That is standard for any website and it tells us nothing about who you are. It runs only on the website. It never runs inside the Anahera Aloft extension or its side panel, and it never touches anything you capture. If you only ever use the extension, no analytics apply to you at all.

The precise details, for the public website only:

• Tool and processor: the website uses PostHog. PostHog, Inc. acts as our data processor, and events are sent to PostHog's US endpoint (us.i.posthog.com). See PostHog's privacy policy.
• What is measured: only a random, non-personal id for the visit and the fact that a page was viewed or a visit began. It never includes anything you capture, and it is not linked to your name, email, or Google account.
• International transfer: because PostHog processes in the United States, visiting the website involves a transfer of this limited technical data to the US. PostHog receives the request from your IP address as part of delivering the service.
• Legal basis (GDPR): your consent where local law requires it, and otherwise our legitimate interest in understanding how the website is used so we can improve it.
• Retention: these website events are kept no longer than 12 months.
• Do Not Track: the website honors your browser's Do Not Track setting. If it is on, no events are sent.
• Session recording: full session or screen recording is off in the production website. It runs only in explicitly-consented research sessions.

Your privacy rights (GDPR / UK GDPR)

Because the extension keeps your captured data on your own device, you already hold it directly, you can view, edit, export, or delete it at any time from the Anahera canvas (Settings → Reset workspace), and uninstalling removes the extension's access entirely. For the limited anonymous analytics collected by the website, you have the right to access, rectification, erasure, restriction, objection, and data portability. To exercise any of these, email welcome@anahera.space. You also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising. California residents have the right to know what personal information is collected, to request deletion, and not to be discriminated against for exercising these rights. Because captured data never leaves your device and website analytics are anonymous, the personal information we hold is minimal. Requests: welcome@anahera.space.

Children's privacy

Anahera Aloft is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact welcome@anahera.space and we will address it.

Host permissions: none

The extension requests no host permissions and no <all_urls> access. Capture on any page works using only the tabs permission, which reads the active tab's URL, title, and favicon. No content script is ever injected into the pages you browse.

The extension's only content script runs on the Anahera web app's own origin (https://www.anahera.space), solely to relay messages between the canvas and the extension. It never runs on, and never reads, the third-party pages you visit.

Changes to this policy

We may update this policy as the extension evolves. The date at the top of this page reflects the most recent revision. Continued use of the extension after a policy change constitutes acceptance of the new terms.

Contact

Questions about this policy: welcome@anahera.space

This privacy policy applies to the Anahera Aloft Chrome extension and its interaction with the Anahera web app.