Gnomad Slate

Privacy Policy

Last updated: June 2026 · Developer: Gnomad Studio (gnomadstudio.org)

At Gnomad Studio, we build local-first tools. This Privacy Policy explains how the Gnomad Slate browser extension processes your data.

1. Our Core Privacy Philosophy

Gnomad Slate is built to be secure, private, and local-first:

  • We do not run any database servers, authentication portals, or sync servers.
  • We do not collect, read, transmit, or sell any of your notes or passwords.
  • No analytics trackers or telemetry scripts are bundled in the extension.

2. Data We Process and Where It Lives

All information you input into Gnomad Slate remains in secure browser sandboxes or your own personal cloud accounts:

  • Markdown Notes & Scratchpad: Saved locally in chrome.storage.local. Never sent to Gnomad Studio.
  • Vault-X Secrets: Encrypted client-side with AES-256-GCM (key derived via PBKDF2-HMAC-SHA256). Decrypted secrets exist only in temporary service-worker memory while unlocked.
  • Master Password: Never stored in plaintext — verified with salt + hash in local storage.
  • Clipboard History: Stored in chrome.storage.session only; cleared when the browser closes. Clipboard filtering runs locally in JavaScript.

3. Optional Cross-Device Synchronization

If you enable sync, data moves through channels you control:

  • Chrome Profile Sync: Uses chrome.storage.sync under your Google Account settings.
  • Google Drive AppData Sync: Encrypted notes sync to your personal appDataFolder with zero-knowledge encryption before upload.

4. Third-Party Permissions Declared

  • storage — local notes, config, and encrypted vault
  • sidePanel — scratchpad in the browser side panel
  • identity — authorization to sync to your Google Drive
  • clipboardRead & clipboardWrite — copy passwords and clipboard history modal
  • notifications — sync success/failure alerts

5. Changes to This Policy

We will never change Gnomad Slate to collect user data. New features remain opt-in and client-side encrypted.

Contact Us

If you have any questions about this privacy policy, please contact us at: