Privacy

What it reads

The address and title of the tab you are on, and only when you ask. Opening the popup, pressing the shortcut or using the right click menu is what makes the extension look; it is not watching your browsing in the background, and it has no permission to.

Text you paste into a compose box on Gmail, Outlook, X and LinkedIn. It looks at the pasted text to see whether it is a single long URL, and does nothing with anything else. It does not read what you type, it does not read the rest of the message, and it does not run on any other site.

What it stores, and where

On your own machine, in the browser's extension storage. None of it is readable by the pages you visit.

• An access token for your FixedLink account, and the identifier the extension registered for itself. Kept in local storage rather than synced storage, so they are never replicated through your browser vendor's account to your other machines.
• Your preferences: default domain, and whether pasted links are shortened automatically. These do sync, because they are settings rather than credentials.
• A link you just made from the right click menu, held only until the popup opens to show it, then deleted.

What it sends

The address of a page, at the moment you ask for it to be shortened, to the FixedLink API. That is the whole of it. What happens to a link after that is the same as for a link made in the dashboard.

Nothing is sent when you open the popup and close it again, when you paste a URL and dismiss the button, or when you browse a site the extension runs on without using it.

What it never does

• No analytics, no telemetry, no crash reporting, no third party of any kind.
• Nothing is sold, shared or used for advertising.
• Your access token is never handed to a page. The part of the extension that runs inside Gmail asks a private background process for a short link and receives a short link, which is why a bug in a website cannot reach your account.
• It does not read cookies, passwords, form fields or page content.

Removing it

Signing out from the extension's settings deletes the token from your machine. You can also revoke its access from your FixedLink account, which stops it working everywhere at once. Uninstalling the extension removes everything it stored.

Links you already made are yours and stay in your account. Delete them from the dashboard, or delete the account, and they go with it.

Asking

Questions about any of this go to support@fixed.link. Every claim on this page describes what the installed extension does, and both stores review its full source before it is published.