Privacy policy — Rasd

Summary

Everything you save in Rasd stays on your device. There is no account, no server that stores your library, no usage analytics, no ads and no sale of any data. "Local only" mode is on by default, and while it is on Rasd makes no network request at all.

What is stored on your device

• Your library: captures and their images, projects and tags, colour palettes, references, issues and step guides — in the browser's local database. Each capture keeps the page title and address it was taken from.
• Your settings, including excluded sites and the library-lock state if you enable it.
• Your GitHub token, if you connect: encrypted with a key the browser will not export.
• One report draft, if sending a report did not complete — with its image after your redactions.

Nothing is written to the storage of the websites you visit, and nothing is synced with your browser account.

What is sent, to whom, and when

Nothing is sent except in two cases. Both require you to turn off "Local only" yourself, grant the connection permission, and press "Send" after reviewing exactly what will be sent:

1. GitHub — if you connect your token and ask to open an issue: only what you reviewed in the send dialog is sent, to a repository you choose, through api.github.com. The token is sent to GitHub only.
2. "Report a problem" — sent to the developer of Rasd:
   • What you wrote: the title, what happened, the steps and what you expected.
   • An image, if you attach one, after your crop and redactions. It is re-encoded before sending so its metadata (including location) does not leave, and redactions are part of its pixels and cannot be recovered.
   • Diagnostics: the Rasd version, operating system type and version, browser and version, and interface language — plus the tool and error code if you opened the report from an error message.
   • A random report ID that prevents duplicates; it identifies neither you nor your device.

Never sent: the address, title or content of the page you were on, your library or your settings. The report asks for no email and no name.

The report reaches a small server the developer runs on Cloudflare Workers, which validates it and limits the number of reports per network using a temporary fingerprint of the IP address that is not stored, then saves it in a private GitHub support repository that only the developer can see. Cloudflare and GitHub act as service providers to the developer; reports and their images are never published.

Permissions

No permanent access to websites: Rasd works on the page where you invoke it with a click or shortcut. Optional permissions (downloads, access to a specific site, and the two services above) are requested when needed, and you can revoke them from the extensions page at any time.

After removing the extension

When you remove Rasd, the browser opens a page on this site with one optional question about why. Its address is fixed, with no identifier and no data from the extension, so we do not know who is visiting, and nothing is sent unless you answer and press "Send".

Private browsing

Rasd runs as a separate copy in private windows. By default its tools work there and nothing is saved to the library; in Settings you can turn it off in private windows or allow it to save.

Retention and deletion

• What you save stays until you delete it. You can turn on automatic deletion after 7, 30 or 90 days.
• Deleted items stay in the trash for 30 days so you can restore them, then they are erased.
• "Delete all data" in Settings erases everything above. Removing the extension erases everything it owns.
• A report stays in the support repository while it is useful for following up the problem. To delete it, send a new report saying "delete report #number", or contact the developer through bysltan.com — the report and its image are then deleted permanently.

Limited Use

Rasd's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements: data is used only for Rasd's single purpose, is transferred only as described above, and is never used for advertising, sold, or used to determine creditworthiness.

Changes

Any change to what Rasd stores or sends is written here, with a new effective date, before it reaches users.