HHighlight Keywords
Guide Languages FAQ Pricing Add to Chrome

Privacy Policy

Last updated: 2 August 2026

Highlight Keywords ("the extension", "we") is a browser extension that highlights words and phrases you save, on the webpages you visit. This policy covers both the extension and this website. The short version: your words stay in your browser, we do not run a server that collects them, and we do not track you or sell anything. A handful of features do reach the internet, because they cannot work otherwise: syncing to your other computers, pulling a list from Airtable, Notion or a URL you choose, checking a Pro licence with Gumroad, and click-to-search. Every one of them is off until you turn it on, each is spelled out below, and none of them ever sends anything to us.

Who is responsible

Highlight Keywords is made and run by one independent developer, based in Pakistan, working alone. There is no company, no staff, and no server that receives your data. For anything about this policy or your data, write to highlightkeywords.app@gmail.com.

What we collect

We do not collect, receive, or store your personal data on any server we control. We have no analytics, no advertising, and no tracking.

The extension stores the following only inside your own browser:

  • The keyword lists, words, and phrases you add.
  • Your settings, colors, styles, and site rules.
  • Local backups of the above.
  • Your Pro license status, if you purchase Lifetime Pro.
  • If you start the free Pro trial: a signed trial marker holding a random id and the start date, no personal data. So a reinstall does not reset the trial, the same marker is also kept in your browser's extension sync storage and as a cookie scoped to this website's domain. It is never sent to us or anyone else.
  • Match statistics for the Insights page: per day, the site hostname (like "example.com"), how many pages matched, and the match counts. Never the words themselves, never full page addresses. This starts switched on when you install. It is kept for 90 days on your device, then deleted automatically, is never synced or uploaded, and Settings has a switch to turn it off and a button to erase it now.
  • The reply address you type into the bug report form, so you do not have to type it again next time. It stays on your device.

This is saved using the browser's local extension storage on your device. Nothing here has a time limit except the match statistics: your lists, settings, and backups stay until you change or delete them.

Sync (optional, Pro)

If you turn on sync, your lists and settings are synchronized across the browsers where you are signed in, using your browser vendor's built-in sync (for example Google's Chrome Sync) through your own account. This is handled by your browser and your account provider. We never receive or have access to that data.

Turning sync off deletes the synced copy of your lists and settings from your browser account, not just on this device. Your lists stay on each device that already has them. If the deletion cannot go through right away, the extension tells you and you can switch sync on and off again to retry.

One thing stays behind on purpose: if you started the free trial, the trial marker (a random id and the start date) remains in your browser account so that reinstalling does not hand out a second trial. It holds nothing personal, and it is not sent to us.

PDF files

Chrome's built-in PDF viewer is sealed, so no extension can highlight inside it. If you choose to open a PDF with Highlight Keywords, the extension opens its own viewer page and renders the file there. The PDF is fetched and drawn entirely inside your browser. It is never uploaded, and we never see the file or its contents.

For a PDF saved on your computer, this only works if you turn on Chrome's "Allow access to file URLs" switch for the extension. That switch is Chrome's own, it is off unless you turn it on, and you can turn it back off at any time from the extension's page in Chrome.

One thing to be clear about, because that switch is broader than the PDF feature that needs it: while "Allow access to file URLs" is on, highlighting works on any local file you open in a tab, not only PDFs. A saved web page, an HTML export, a text file. That is deliberate and it is useful, and it is the same highlighting doing the same job. It still all happens inside your browser. Nothing about a local file is uploaded, logged, or sent anywhere, and we never see it. If you would rather the extension never touched local files at all, leave that switch off and everything else keeps working.

Share links

If you share a list, its words are encoded into the link itself, in the part after the # sign. Creating or opening a share link uploads nothing; the page decodes the link inside your browser. Anyone who has the link can read that list, so pass it around the way you would pass around the words themselves.

Network requests the extension can make

By default the extension talks to nothing. Install it, add your words, and every one of them stays on your computer. Everything below is a feature you have to switch on yourself, one at a time, and each one is listed here so you know exactly what it sends and where. Turn none of them on and nothing ever leaves your browser.

  • Remote lists (optional, Pro): if you point a list at an address, the extension downloads the words from the address you chose and nowhere else. Three kinds are supported. A plain URL, such as a published Google Sheet or a Pastebin link, is fetched with no credentials at all. For Airtable and for Notion you also paste an access token, and that token is sent to Airtable or to Notion in the request, because it is the key that lets them answer. It goes to them directly and to nobody else. We never see it, it is never sent to us, and it is left out of backup files on purpose so a backup you email or copy to a USB stick cannot leak it. The list refreshes on the schedule you set, which is the one case where the extension makes a request without you clicking anything, and you choose that schedule when you set the list up.
  • License verification (optional): if you buy Lifetime Pro and enter your license key, the key is sent to Gumroad to confirm the purchase. That check repeats quietly in the background from time to time, roughly every two weeks while the extension is running, because a key that is never re-checked would have no way to notice a refund. Only the key is sent, and only to Gumroad, under Gumroad's own privacy policy. If the extension cannot reach Gumroad for 45 days in a row, Pro switches itself off until the next successful check.
  • Click actions you set up (optional): a list can be set so that clicking a highlighted word searches for it or opens a link built from it. If you choose that, clicking sends the word to the search engine or address you picked, which is a normal web request to that site. The default is to copy the word to your clipboard instead, which sends nothing anywhere.
  • Bug reports and suggestions (optional): the form in Settings opens your own email app with the message, your reply address, and the diagnostics shown on screen (version, browser, how many lists and words, whether Pro is on). Nothing is sent until you send that email yourself. See "When you contact us" below.
  • PDFs (optional): when you choose to open a PDF in the extension's viewer, it downloads that PDF from the address you were already on, or reads it from your computer if the file is a local one. The download carries the same cookies your browser would normally send, which is what lets a PDF behind a login still open. That request goes to the site the PDF is on. Nothing is sent to us.
  • External links: buttons such as the Gumroad checkout or the Chrome Web Store link open third-party websites in a new tab. Those sites have their own privacy policies.

Page content

To highlight your keywords, the extension reads the text of the pages you visit, in your browser, only to find and mark your words. This processing happens locally on your device. The page content is not transmitted to us or to anyone else.

Permissions and why they are needed

  • Storage: to save your lists and settings on your device. The unlimited part only means the browser does not cap how many words and backups you can keep.
  • Access to web pages: to read page text and apply highlights.
  • Context menus: to let you add a selected word to a list.
  • Alarms: to refresh remote lists on a schedule and make backups.
  • Running the highlighter on a page: to start highlighting on tabs that were already open when you install or update, so you do not have to reload them.
  • Desktop alerts and sound: only if you switch on alerts for a list, to tell you when that list matches a page. The sound is played by a small hidden page because the extension's background worker cannot play audio itself.
  • Cookies: only for one cookie on this website's own domain, which holds the free trial marker so a reinstall does not hand out a second trial. No cookies on any other site are read or written.
  • Access to files on your computer: only to open a PDF you picked, and only while Chrome's "Allow access to file URLs" switch is on.
  • Access to this website's own address: the extension holds standing access to highlight-keywords-site.vercel.app only, which is how it reads and writes the trial marker cookie. It gives no access to any other site.
  • Optional site access: requested only when you use remote lists or activate a license, and only for the specific site involved.

A backup you export never contains your license key, your trial marker, or any access token you saved for a private remote list. So you can email a backup or drop it in cloud storage without handing over your purchase or your accounts.

When you contact us

If you send a bug report, a suggestion, or any email, then we do receive something: your email address, whatever you wrote, and the diagnostics you saw before sending. That message lands in a Gmail inbox and is read by one person. It is kept only as long as it is useful for answering you and improving the extension, and it is never used to market anything to you or passed to anyone else. Ask and it gets deleted.

This is the one place where personal data reaches us, and it only happens because you chose to write. The extension itself never sends anything about you.

This website

The site has no analytics, no ads, and no tracking pixels. It sets one cookie, and only if you start the free Pro trial: the trial marker described above, so a reinstall does not hand out a second trial. Nothing else is stored about your visit.

The fonts are served from this site itself, so visiting a page here contacts no other company at all. It used to load them from Google Fonts, which meant Google saw your IP address just because you read this page. That is gone.

How to delete everything

Open Settings, go to Sync and backup, and use "Reset all data and settings" in the danger zone. That clears your lists, settings, backups and statistics from this device, and from your browser account if sync was on. Uninstalling the extension also removes its local storage. If you emailed us, ask and we will delete the email too.

Your rights

Depending on where you live, you have rights over personal data held about you: to see it, correct it, get a copy, or have it deleted. There is an unusual answer here, which is that we hold almost nothing. Your lists live on your own device, so you already have full access: Settings can export everything as a file, and the reset button deletes it.

For the one thing we do hold, an email you sent us, write to highlightkeywords.app@gmail.com and ask for a copy or for deletion. If you are in the UK, the EU, or another place with a data protection authority, you can also complain to that authority. In the EU that is the supervisory authority for the country you live in; in the UK it is the ICO.

Where the law asks what allows us to handle data at all: keeping your lists working on your own device is what you asked the extension to do, answering your email is what you asked us to do, and checking a licence key is part of the purchase you made. We do not rely on any legitimate-interest claim to profile or track you, because we do neither.

Data sharing and selling

We do not sell, rent, or share your data. There is no third party we hand your lists to.

Said the way the Chrome Web Store asks for it: the extension's use of information it can read is limited to providing the highlighting features you turned on, and improving them. It is not sold, not transferred to anyone except as this policy describes, not used for advertising, not used to build a profile of you, and not read by a person.

Children

The extension is a general productivity tool and is not aimed at children. We do not knowingly collect anything from a child under the age where their country requires a parent's consent, which is 13 in the United States and up to 16 in parts of Europe.

Changes to this policy

If this policy changes, we will update the date above and post the new version on this page.

Contact

Questions about this policy: highlightkeywords.app@gmail.com.

© Highlight Keywords. Built and maintained by one person.
Guide Pricing Languages Compare Privacy Terms Changelog Contact