The browser extension's privacy note.

What it reads

When you click Save, press the shortcut or choose Save link to Kefli, the extension reads the page in front of you: the article's text, its title, its author and its address. It reads nothing at any other time, and never pages you don't save.

What it sends

The extension encrypts the capture in your browser, with a new key made for that one save, and sends it to Kefli's server for your phone to collect:

• the encrypted capture, which expires from Kefli's server after 14 days;
• a sealed message to your phone with the page's address, title, site and author and the key that opens the capture. Only your phone can open it, and it's deleted once your phone has it, or after 30 days.

If a page couldn't be captured, the message carries just its address and title, and your phone fetches the page itself.

Your phone then saves the article to your library in the usual way (see Privacy). Kefli's server can't read the capture or the message; it sees only encrypted files, their sizes, and when they were sent.

When you pair the extension with your phone, the two exchange keys through Kefli's server, the same way. The extension never holds your library's key: it has a key of its own, which your phone can remove under Connected browsers.

What it keeps

In your browser's storage for the extension, it keeps the pairing (your library's public identifier, the servers to send to, and the date you paired) and any saves waiting to be sent while you're offline, already encrypted. Unpairing deletes them.

What it never does

• It collects no analytics, and sends nothing about you or your browsing to us or anyone else.
• It doesn't read your history, your other tabs, your cookies or your network traffic.
• It doesn't show adverts or sell data, and it has no data to sell.

Questions

Write to privacy@kefli.app.