Privacy Policy

Last updated 1 October 2026

Necessair saves links, text selections, article text and images so you can come back to them later. It comes as a browser extension for Chrome and Firefox and as an app for the Mac. This policy describes exactly what both do with that data.

What is collected

Only what you save. Saving is always something you do: you press Save, choose a menu item, or drop an image on the window.

In the browser extension. When you click “Save page”, “Save selection” or “Image”, or use the right-click menu (on a page, a selection, a link or an image), the extension stores:

• the page URL, title and site name
• the article text or the text you selected
• for an image: the image itself, kept inside the capture; a small thumbnail (320 pixels on the longest side); the address the image was loaded from, when it has one; and its description (alt text), when the page gives one
• the date you saved it, and any tags or notes you add

An image larger than 1 MB or 2048 pixels on its longest side is shrunk and re-encoded to fit, and is not saved at all if it still does not fit. If the website does not let the extension copy an image, it saves a crop of the visible tab instead: a screenshot of the part of the screen where the image is, at screen resolution, which is lower than the original. The capture says so in the list. The rest of the screenshot is discarded, not stored.

The extension does not track your browsing. It reads a page only at the moment you ask it to save that page or an image on it, and only the tab you are looking at. When you press “Image”, it waits for your click on an image (or Esc) and then stops. It does not run on pages in the background, does not record history, and does not observe tabs you have not asked it to save.

To read an image, the extension may ask the website that served it for the image again, at the address the page loaded it from and without your cookies or sign-in. That is an ordinary request to that website, like the one your browser made when the page loaded. It does not go to the developer.

In the Mac app. A capture is created when you:

• send text to Necessair with Share or with “Save to Necessair” in the Services menu
• type a new capture in the app
• drag an image onto the library window, or paste one with ⌘V
• press Save on a suggestion, or choose File ▸ Save What I Copied (⇧⌘V); see “Suggestions when you copy” below

The app stores:

• the text you sent, typed or copied, and the link or title if you typed one
• for an image: the image itself in the Mac app’s own folder (see “Where it is stored”), a small thumbnail, the file name as its title, and the web address it came from when the app you took it from provides one (never a path on your Mac)
• for text sent from the Services menu or saved from a suggestion, the name of the app that was in front at that moment
• the date you saved it, and any tags or notes you add

The Mac app does not read other apps. It does not need accessibility or screen access. It receives content only when you send it, drop or paste it, type it, or press Save on a suggestion. The Share extension and the Services entry send text and links only, not images.

Suggestions when you copy (Mac app)

The Mac app notices when you copy something new, and what kind of thing it is (a link, text or an image), without reading it, and offers to save it. It reads what you copied only if you press Save. What you decline is not stored or sent. You can turn this off in Settings ▸ Suggestions.

• On by default. The first suggestion carries a link to Settings, where you can turn it off.
• What it looks at before you press Save. Only that something changed, and what kind of thing it is, using the checks macOS provides for that. It shows you the kind (“You copied a link”), not the content.
• What it skips. Copies from password managers, and anything the copying app marks as a password, a one-time code or other temporary content. That applies to suggestions only. File ▸ Save What I Copied saves whatever is on the clipboard at that moment, because you asked it to: Necessair keeps nothing you did not choose to save, and what you choose to save is yours to choose.
• What you decline. Nothing about it is kept. The app remembers only that you declined, as a count. Closing the panel and letting it go away on its own both count as declining. After four in a row it stops asking for 7 days.
• What it remembers. Four small settings, on this Mac: whether suggestions are on, whether you have seen the first notice, the count of declines in a row, and the date until which it is paused. None of it contains what you copied.
• What macOS controls. Under the setting macOS calls “Paste from Other Apps” (System Settings ▸ Privacy & Security), the app may be allowed only to suggest links and images, never plain text, or not allowed to look at all.
• Where it goes. Nothing leaves your Mac because of this feature. A suggestion you accept becomes a capture like any other, and syncs to your Google Drive only if you have connected it.

Where it is stored

• On your device. In the extension, every capture is written to your browser’s local storage (IndexedDB). In the Mac app, captures are kept in a file, captures.json, inside the app’s own sandbox container, and each image is kept as its own file in a folder named Images next to it. That is the primary copy, and it never leaves your machine on its own. If the Mac app finds a capture in captures.json that it cannot read, it keeps the rest of your library and first saves a copy of the file next to it, named captures.unreadable-<date>.json, so nothing is lost.
• In your Google Drive, only if you connect it. Captures sync to a private application folder in your own Drive, shared by the extension and the Mac app, under your own account, counting against your storage quota. An image is part of its capture, so it is synced too. We have no access to it.

Both request only the https://www.googleapis.com/auth/drive.appdata scope, which can read and write a hidden folder reserved for Necessair. They cannot see, read or modify any other file in your Drive.

What is never done

• No data is sent to the developer or to any third party.
• No analytics, telemetry, crash reporting or usage statistics.
• No advertising, no profiling, no data sold or shared.
• Nothing is transmitted anywhere except between your device and Google, for sign-in and for your own Google Drive. The Mac app talks only to accounts.google.com, oauth2.googleapis.com and www.googleapis.com. The one addition is in the extension: to save an image it may request that image again from the website that served it, as described above.
• Nothing about what you copy and decline is stored or sent.

Authentication

In the extension, if you connect Google Drive, an access token is stored in your browser’s extension storage so syncing can continue without asking you to sign in repeatedly. The token is held only on your device and is discarded when you disconnect your account.

In the Mac app, you sign in to Google in the system’s sign-in sheet. The app keeps a Google refresh token in the macOS Keychain, on this Mac only; it is never written to the captures file. When you press Disconnect, the app asks Google to revoke the token and removes it from the Keychain. The email of the connected account is fetched from Google to show in the Drive panel, and is not stored.

Deleting your data

• Individual captures: delete them in the extension or in the Mac app. The capture is emptied right away. The text, image, thumbnail, image address, URL, title, site name, tags and notes are gone, and the Mac app deletes the image’s file from its Images folder. What remains is a small marker: the item’s id and type, the date it was saved, the date it was deleted, whether it was archived, a sync counter and a random identifier for the device. On the next sync the Drive copy is overwritten with that marker, so your other devices learn it is gone. One exception on the Mac: a captures.unreadable-<date>.json copy, if the app ever made one, still holds what the file held at that moment. Delete it by hand if you do not want it.
• The markers: each device removes a marker 90 days after the deletion, once every connected Drive has received it. The marker file in your Drive’s hidden folder stays there until you delete Necessair’s hidden app data (see below). It holds no content.
• The summary file: the Drive folder also has a summary file listing the title, link, site name and tags of your captures. Both apps rewrite it on the next sync after a deletion, and the deleted capture leaves it then. Earlier versions rewrote it later (the extension within an hour, the Mac app not at all); after updating, it is corrected on the next sync.
• Deletions made by older versions: the extension before 1.0.2 and the Mac app up to version 1.0 (build 2) kept a deleted capture’s content. Updating empties those markers the next time the app starts, and the next sync overwrites them in Drive. A marker an older version had already removed from every device cannot be reached this way; its copy in Drive may still hold the content until you delete the hidden app data.
• Everything local, extension: removing the extension deletes its local storage.
• Everything local, Mac app: moving the app to the Trash does not remove its data. To remove it, press Disconnect in the Drive panel first, so the Google token is revoked and removed from the Keychain. Then quit the app and delete the folder ~/Library/Containers/caroljardims.com.br.Necessaire, which holds your captures, your images and any captures.unreadable-<date>.json copy. If you added “Save to Necessair” to the Services menu, also delete ~/Library/Services/Save to Necessair.workflow.
• Everything in Drive: Google Drive → Settings → Manage apps → Necessair → Delete hidden app data. Because the folder is hidden this is the only way to remove it, and it cannot be undone.

Children

Necessair is not directed at children and collects no personal information from anyone.

Changes

If this policy changes, the updated version will be published here with a new date. Material changes will be noted in the release notes of the extension and of the Mac app.

Contact

Questions or concerns: see the FAQ or write to me, or open an issue (issues are public, so describe what you saved rather than pasting it).