Privacy Policy

Shiori is a browser extension for Chrome, Edge, Brave and Helium. Your workspace lives in your browser, and nothing in it leaves your browser unless you sync it on a paid plan or turn on one of the optional features below that uses an outside service.

The extension has no ads, no analytics and no error tracking. We never sell your data or use it for advertising.

• •Your workspace and settings. Collections, spaces, groups, saved tabs (address, title and icon), notes, checklists, images, reminders and timers are stored in your browser's own storage.
• •Open tabs. The sidebar reads your open tabs and windows to show them. Tab previews come from screenshots of the visible tab that are kept in memory only and never saved or sent.
• •Clipboard. When you open or return to a new tab, Shiori reads the text on your clipboard to offer saving a copied link. The text is never sent anywhere; only a fingerprint of it is kept so the same link is not suggested twice.
• •Bookmarks. Your browser bookmarks are read only when you choose to import them.
• •Your Gemini API key. If you add one for the Ask assistant, it is stored in your browser and never sent to us.
• •What Shiori never reads. Your browsing history, or the text of the pages you visit.

Cloud sync comes with paid plans. On one, Shiori stores the following on our servers so your workspace follows you to other browsers. Anything synced earlier stays there unless you delete your account:

• •Account. Your name, email address and profile picture, and either a hashed password or your Google sign-in. We never see or store your password in plain text.
• •Workspace. Everything in your workspace listed above, plus images you upload (up to 25 MB per account). Images you add by web address stay in your browser.
• •Version history. The 30 previous versions of your workspace, so a mistake on one device can be undone.
• •Settings. Your settings, except whether the privacy screen is on.
• •Browsers. One record for each browser you sign in from: a random identifier, a name such as “Chrome on Windows” and when it was first and last seen. This is how device limits work.
• •Sign-in sessions. Each session may record the IP address and browser it was created from.

Your open tabs are never uploaded or stored by sync. They pass through our server only if you connect an AI app (below). Shiori sends no emails about your account.

You can let ChatGPT, Claude or an AI agent on your computer work with Shiori. Nothing is shared until you sign in to Shiori from that app, approve the access it asks for, and turn on AI access in Shiori's settings (Account → AI connections) in that browser. You can turn it off there, or remove the app from your Shiori account, at any time. Signing out also turns it off.

• •What the app can see. Only what it asks for: the titles and addresses (without the part after ? or #) of your open tabs, their tab groups and how long ago each was used, and the names and contents of your collections, spaces, groups, saved tabs, notes and checklists.
• •What it can change. It can group, ungroup, open and close tabs, save open tabs into Shiori and move saved items between groups. It cannot edit or delete anything you saved, and it stays within your plan.
• •How requests travel. The app sends each request to Shiori's server, which wakes your browser through the browser's push service (Google for Chrome, Microsoft for Edge). That message contains no tab or workspace data. Your browser answers through Shiori's server, which holds the answer in memory only until it reaches the app, at most 25 seconds, and never stores or logs it.
• •What we keep. Which apps you approved, with their access and refresh tokens until they expire or you remove the app, and for each browser with AI access on, its name and push address. A browser that has not checked in for 90 days is removed.
• •The AI app itself. What the app does with what it reads is covered by its own privacy policy, for example OpenAI's for ChatGPT and Anthropic's for Claude.
• •Agents on your computer. With Shiori Local Bridge, requests go from the agent to your browser on your own computer and never reach our servers.

These send data to another company only when you use them. Each service handles that data under its own privacy policy.

• •Ask and AI sorting (Google Gemini). Requests go straight from your browser to Google with your own API key. They include the titles and addresses (without the query part) of the open and saved tabs involved, and the names of your spaces and groups.
• •Smart Save and Quick Organize (classifier.dev). Smart Save is off until you turn it on; Quick Organize runs when you click it. They send tab titles, site names and page paths, and the names and descriptions of your groups and spaces. No account or cookies are involved, and Shiori asks the service not to share the data.
• •Link previews. To show a title or preview for a saved link, the extension fetches that page itself, without your cookies. For YouTube, X, Reddit, GitHub, Vimeo, Loom, Pinterest and Instagram links it uses their public embed services. Those sites see the request as they would any visit.
• •Placeholder images. A new empty image card loads a random photo from picsum.photos.
• •Sign in with Google. Google shares your name, email address and profile picture with Shiori.

• •Analytics. On the live site (never in the extension) we use PostHog, hosted in the United States, to see which pages are visited, which buttons are clicked, the browser and device type and approximate location from your IP address. It may also record how pages are used, with anything you type hidden. If you are signed in, this is linked to your account ID, email address and name.
• •Purchases. When a payment is confirmed, our server records the plan and amount in PostHog against your account ID.
• •Hosting. The website runs on Vercel, which keeps standard request logs.
• •Uninstall survey. If you answer it, we keep the reasons you chose, anything you write and the extension version. It is not linked to you or your account.

Dodo Payments processes every purchase. They receive your name and email address, and handle your card and billing details; we never see your card. We keep your plan, its status and renewal date, and the Dodo identifiers that link your account to your purchase.

We never sell or rent your data. It reaches only the services that run Shiori:

• •Convex. our database and server.
• •Dodo Payments. payments and subscriptions.
• •Vercel. website hosting.
• •PostHog. website analytics.
• •Google. sign-in, and Gemini only if you use Ask.
• •classifier.dev. only if you use Smart Save or Quick Organize.
• •Railway. runs the server AI apps connect to, only if you connect one.
• •Google and Microsoft push services. wake your browser for an AI app's request; the message carries no tab or workspace data.
• •AI apps you connect. such as ChatGPT or Claude, which receive what they ask for.

Beyond these, we disclose data only if the law requires it or to protect our legal rights.

We keep your synced data while your account exists. Images you remove from your workspace are deleted from our servers after 14 days.

You can delete your account from the Account page. That cancels any active subscription and deletes your workspace, its version history, settings, images, browser records, sessions and plan from our servers. What stays in your browser is yours to keep or remove.

Website analytics already collected stay in PostHog, and Dodo Payments keeps the payment records it needs by law. Ask in the Discord community if you want your analytics removed too.

• •Use it without an account. The Free plan works without signing in. It never uploads your workspace.
• •Take your data with you. Settings → Data exports a full backup, a CSV or an HTML bookmarks file at any time.
• •Leave the optional features off. Smart Save stays off unless you turn it on, and Ask needs your own key.
• •Ask us. To see, correct or remove what we hold about you, ask in the Discord community.

Data travels over HTTPS and is stored in a managed database with access controls. Passwords are hashed. The extension fetches pages for previews without your cookies. No system is free of risk, but we take reasonable care to protect your information.

Shiori is not meant for children under 13, and we do not knowingly collect their information.

When this policy changes, we update the date below. If a change affects how your synced data is used, we will say so on this page before it applies.

Questions about your privacy? Ask in our Discord community.