Privacy Policy - The Marking App Browser Extension

Last updated: May 2026

The Marking App extension collects account data, session tokens, comment usage events, behavioural analytics, and domain-specific page selection data.

Account data:
Your email address and display name are fetched from your Marking App account when you connect the extension. This is stored locally in your browser storage and is used only to display your profile in the extension popup.

Session tokens:
Your Supabase session tokens are stored locally in browser storage to keep you signed in across browser restarts. These tokens are never sent to any server other than The Marking App backend and Supabase.

Comment usage events:
When you insert a comment using the autocomplete panel, an event is recorded in your Marking App account. This includes which comment was inserted, tags and score at the time of insertion, whether a variant was selected, and the source as "extension". This data is used to power usage analytics in the web app and is not shared with third parties.

Behavioural analytics:
We use PostHog to record high-level usage events such as when the autocomplete panel is opened or when a comment is saved. These events include only an anonymised user ID. No email address or display name is sent to PostHog.

Domain-specific page selection:
The extension remembers which Marking App page you last used on each website hostname. This is stored locally on your device only.

The extension does not collect:
- The content of text inputs on third-party marking sites
- Personally identifiable information beyond what is listed above
- Browsing history or page content outside of reading your saved comments from The Marking App backend

Data is stored locally in browser storage or in The Marking App Supabase database, protected by Row Level Security policies.

Third-party services:
Supabase is used for database and authentication.
PostHog is used for behavioural analytics.

Permissions:
storage - stores session tokens and cached comment data locally.
tabs - reads the current tab URL to restore the correct page selection per domain and closes the auth tab after sign-in.
Host access to all URLs - allows the extension to inject the comment panel into supported marking tools.

Contact: contact@themarkingapp.com