Holdfast

Privacy Policy

Last updated 12 September 2026

Holdfast has no server that stores your data. Clips live in your browser and in your own Notion workspace. We operate one endpoint, and it exists only to complete the Notion sign-in handshake — it keeps nothing.

What the extension handles

Data	Where it goes	Why
The page address, title, and either your selected text or the page's description	Stored in your browser, then sent to your own Notion workspace	This is the clip. It is read only at the moment you press Save, never in the background.
Your Notion access token and the database you chose	Your browser only	So clips can be filed without asking you to sign in again.
Your licence key, and the email your payment provider returns for it	Sent to Polar to check the purchase; the answer is cached in your browser	To unlock the paid plan and to keep it working offline.

The sign-in endpoint

Connecting Notion produces a one-time authorization code. Exchanging that code for an access token requires a secret that cannot be shipped inside an extension, so the exchange happens on a small endpoint we run.

That endpoint forwards one request and keeps nothing. It has no database, writes no logs, and never sees a clip. Only this extension may call it.

What we never do

No analytics, telemetry, crash reporting, or advertising identifiers.
No reading or transmitting of pages you did not explicitly save.
No selling, renting, or sharing of anything with third parties.
No account with us. There is nothing to sign up for.

Permissions, and why each one exists

Permission	Reason
`activeTab`, `scripting`	Read the current page at the moment you press Save. This is deliberately narrower than a content script, which would run on every page you visit.
`storage`	Hold the clip queue and your settings on your device.
`alarms`	Retry clips that have not reached Notion yet.
`identity`	Open Notion's own sign-in window.
Access to `api.notion.com`	Where your clips are filed.
Access to the payment provider	Checking a licence key.

Third parties

Notion holds the clips you send to your own workspace, under your own account and their policy. Polar is the merchant of record for purchases and handles payment data; we never see your card details.

Removing your data

Disconnecting Notion in the extension's settings deletes the stored token. Uninstalling the extension removes everything it kept on your device, including the clip queue. Clips already filed belong to your Notion workspace and are deleted there, by you.

Children

Holdfast is a tool for saving web pages and is not directed at children under 13.

Changes

If this policy changes in a way that affects what leaves your browser, the extension's release notes will say so rather than only this page changing quietly.

Contact

Open an issue at github.com/crxkit/support.