Privacy Policy

Punchlist Web Capture

Chrome extension · Effective July 2, 2026

Punchlist Web Capture is the browser companion to the Punchlist macOS app: annotate a web page, and your captures land as Items in the app on the same computer. This policy explains what the extension handles and where it goes, which is a short story, because it all stays on your machine.

The short version: the extension makes no network requests and sends nothing to us or to any third party. Your captures travel over Chrome's local native-messaging channel to the Punchlist app on your own computer, and are stored there. No account, no server, no tracking.

What the extension handles

When you turn capture mode on and annotate a page, the extension processes:

  • Your annotations:the comments you type.
  • Screenshots:an image of the visible tab, or the region you select, taken only when you create an annotation.
  • Page context:the page's URL and title, and metadata about the element you clicked (its selector and text), so the resulting Item says where the feedback points.
  • Session state:your in-progress annotations and panel position, kept in Chrome's local extension storage on your device until you send or discard them.

The extension is idle until you start a capture session. It does not read, collect, or transmit your browsing activity in the background.

Where it goes

When you click Send to Punchlist, your captures move over Chrome's native messaging channel (a local pipe between the browser and an application on the same computer) to the Punchlist macOS app, which stores them in a folder in your home directory (~/.punchlist). There is no server in the middle. The extension itself makes no network requests of any kind.

What we never do

  • No data is sold, rented, or transferred to anyone.
  • No analytics, telemetry, or tracking of any kind in the extension.
  • No accounts, and no collection of personal or financial information.
  • No use or transfer of data for purposes unrelated to capturing your annotations into Punchlist, and none for advertising or creditworthiness, ever.

Why each permission

nativeMessagingThe one channel out: hands your captures to the Punchlist app on your own computer. This is how everything stays local.
activeTabTakes the screenshot of the tab you're annotating, at the moment you annotate it.
tabsReads the page's URL and title so each capture records where it came from.
storageKeeps your unsent annotations and panel position on your device between pages.
<all_urls>Lets the annotator load on any page you choose to capture from, and lets a capture session follow you across page navigations. It stays dormant until you start a session.

The Punchlist macOS app

The app your captures land in is a separate, local-first program with the same posture: everything you capture lives in ~/.punchlist on your Mac and is never uploaded. The app (not this extension) sends anonymous usage counts (events like "app opened," tied to a random ID, never your content or IP address) so we can tell whether Punchlist is being used; you can turn that off any time in the app's Settings. See the Punchlist FAQ for details.

Changes to this policy

If the extension's data practices ever change, we'll update this page and the version history will show in the extension's release notes. The effective date above always reflects the current text.

Contact

Questions about privacy, or anything else? Email tylerhathaway09@gmail.com.