This page explains the same facts as the privacy policy, arranged for a quick check: by permission, by place of storage, and by request. Where they differ in wording, the privacy policy is the full statement. Every command with the permission it needs, on one page: the cheat sheet.
Chrome permissions
A new install asks only for what the basics need. The rest is optional: Chrome asks for it when you switch on the feature that uses it, and switching the feature off gives it back.
| Permission | Kind | What Wyrd uses it for |
|---|---|---|
| Storage | Required | Keeping your keywords, settings and the rest, in Chrome's own storage for extensions (see below). |
Redirect rule, and access to wyrd.internal | Required | One rule for one address, wyrd.internal, a reserved name that can never be a real website (.internal is kept for private networks and never exists on the internet). It is how the private search address, share links and starter-pack links reach Wyrd inside Chrome. A second rule does the same for wyrd.invalid, the address up to Wyrd 1.0, so older search-engine entries and links keep working. No other request is looked at, blocked or changed. (Chrome's install prompt describes this permission in general terms.) |
| Alarms | Required | Timers: re-reading shared lists every 6 hours (and once, an hour after a refusal), the daily backup check, backups a minute after a change, and the hourly check for due reminders. |
| The tab you click on (active tab) | Required | When you click Wyrd's icon, the popup reads the address and title of that one tab to fill in its Save box. Also what > /save and the Define card use, for that one tab. |
| Side panel | Required | The side panel with your tab bundles and reminders. |
| Context menus | Required | Right-click search, and the Define and Translate items when that feature is on. |
| Identity | Required, used only after you press Sign in with Google | Chrome's own Google sign-in, for Google Sheet backup and sync, with one scope: the files Wyrd itself makes in your Drive. |
| Tabs | Optional: Tab bundles | Reading the addresses and titles of your open tabs when you save them (/clear, /dedupe, /save, /snapshot New in 1.2) or pick them for a bundle. Chrome words it as "Read your browsing history". |
| Scripting | Optional: Define & translate | Showing the Define or Translate card in the page you right-clicked in. The card does not read the page. |
| History | Optional: on use | Keyword suggestions from your history (Scan my history) and page titles on the Keywords page (Look up titles). Read on your computer; never sent. |
| Access to a website | Optional: one site at a time | Reading a shared list or a starter pack from its site, committing to a GitHub list, the AI helper's provider, and the dictionary for Define. Asked for per site, when you press Preview, Load or Save. |
Wyrd does not ask for your bookmarks, does not talk to programs on your computer, and has no scripts that run in the pages you visit. The one thing it ever puts into a page is the Define card you asked for.
What is stored where
In your own Chrome sync
If you have Chrome sync turned on, these follow you to your other computers. Google provides Chrome sync; the developer of Wyrd has no access to it.
- Your keywords.
- Your settings: the fallback search, naming rules, the view you chose, what the icon opens, light or dark, which features are on, your right-click searches.
- Your shared-list subscriptions: the address, the namespace, the name you gave it, the kind of list and the sign-in method. Never the list's contents, never a token. Some list addresses are secrets themselves, such as a Google Sheet's "Publish to the web" link; they are synced like the rest.
- Reminders.
- Your 10 most recent tab bundles: their names and dates, and the address, title, pinned state and window of each tab.
- The private part of your search address, so the same address works on all your computers; and, if you signed in with Google, which sheet in your Drive is Wyrd's.
On this computer only
- Usage counts: per keyword, a total, the last day used and a count per day, never what you typed after the keyword. Daily counts older than a year are dropped.
- The last 20 snapshots of your keywords, and the change history (the last 1,000 changes), which keeps earlier addresses.
- Every tab bundle, and the recently saved list the popup shows.
- The categories of your own keywords, page titles, and the suggestions you chose to ignore.
- What each shared list contained when it was last read, its status, its "what changed" notes and the history of its changes.
- Tokens for shared lists and the AI helper's key, unencrypted, protected like the rest of your Chrome profile: never synced, exported, logged or shown again.
- Small preferences and bookkeeping: which groups you folded, the welcome card, the steps of Optional setup, when you last backed up, the email address you typed for Email me a copy, and the folder you picked for automatic backups.
Sync limits, in plain words
Chrome gives each extension about 100 KB of sync space in all, and at most about 8 KB per item. That shapes two things in Wyrd:
- Your keywords share one item: roughly 170 keywords with short addresses, or about 75 long deep links. Keyword tools shows how full it is; a save that would not fit is refused, and nothing already saved is lost.
- Tab bundles: only the 10 most recent go through sync, each up to about 6 KB. Older ones stay on the computer that saved them. To have every bundle everywhere, use Google Sheet backup and sync.
Usage counts, page titles, categories, history and the contents of shared lists are kept on the computer and do not count towards the limit.
Every network request Wyrd can make
If you never read a shared list or a starter pack, never set up the AI helper, never use Define and never sign in with Google, Wyrd makes no network requests at all. Otherwise it makes exactly these kinds, each started by something you chose:
| Request | Sent to | When | What goes with it |
|---|---|---|---|
| Reading a shared list or a starter pack | The address you gave (for a Google Sheet, Google's CSV download of that tab; for GitHub, the raw file or GitHub's API) | Preview, subscribe, every 6 hours, when Chrome starts, Refresh; a pack once, when you press Load | For a list, your sign-in for that site, your token, or nothing, as you chose; for a pack, nothing. Never your keywords, history or usage. |
| A commit to a GitHub list | api.github.com | When you add, change, remove or categorise a keyword of a GitHub list you gave a write token | That one entry, with your token |
| The AI helper (optional, Teams view, off by default) | The provider you configured | When you press Send | The lines you were just shown (keyword, site name, description, title, category; never a full address, a token or a usage count), with your key |
| Define (optional) | api.dictionaryapi.dev | When you define a word | That one word. Translations are made on your computer. |
| Google Sheet backup and sync (optional) | Google's sign-in, Sheets API and Drive API | After you press Sign in with Google: when a bundle or your keywords change, when Chrome starts, Sync now | Your tab bundles and backup, to the one sheet Wyrd made in your Drive |
Every request is https, except an AI model you run on your own computer at localhost, which never leaves it. Requests go without a Referer. Email me a copy is not a request: it opens an email draft that you send yourself. Using a keyword simply opens its page, as if you had typed the address.
What Wyrd never does
- It does not send any data to the developer. There is no Wyrd server to send it to.
- It does not sell, share or transfer data.
- It has no analytics, telemetry, advertising or tracking.
- It does not load or run code from the internet. Shared lists and AI answers are data: checked, previewed and never run.
- It does not read the content of the websites you visit.
Deleting your data
- Everything: remove Wyrd in
chrome://extensions; Chrome deletes all it stored. Remove Wyrd's search engine entry too, if you made one. Backup files you saved are yours to delete. - A shared list: remove it on the Shared lists page; its keywords, notes and token go, and so does Chrome's access to its site, unless another list uses it.
- History-related data: Remove history access in Keyword tools, and accept the offer to clear page titles and ignored suggestions.
- Usage, snapshots, change history: each has a Clear button on the Activity page.
- Your Google Sheet: sign out, delete the sheet in Google Drive, and remove Wyrd under third-party apps in your Google Account.
For backups and restoring, see backups. The full statement is the privacy policy.
NextChrome and Firefox →