Browser extension privacy policy
Effective 31 October 2026. This policy covers Thydo browser activity and its connection to the Thydo Windows companion. The operator is Matej Rifelj. Contact: matej@rifelj.com.
What the extension reads
After you enable website tracking, the extension reads the active tab’s full URL and title only when its browser window is focused. It also reports the browser name, window focus, and whether the window is private. URLs can include paths and query parameters, including information that a website places in its URL.
It does not read page bodies, browsing history, cookies, passwords, form entries, or keystrokes. It does not inject scripts into websites. It stores your enable/pause preference locally in the browser.
Why this data is used
The single purpose is to associate focused website activity with your Thydo tasks and show productive and distracting website time. The extension displays the current website and lets you enable or pause website tracking and open your task activity in Thydo.
Where the data goes
The extension sends active-tab observations to the installed Windows companion using Chrome’s native messaging interface. It does not send them directly to an advertising or analytics service. The local bridge keeps the latest observation in your Windows user profile, replacing it as observations arrive. The companion accepts a snapshot only while its matching browser is focused and the snapshot is no older than 2.5 seconds. An existing snapshot file can remain after reporting stops.
The companion sends activity, including website URLs, titles, and timing, to your connected Thydo server and associates it with your paired account. The normal server is app.thydo.com, operated by Matej Rifelj using Hetzner hosting infrastructure. Hosting infrastructure processes data as needed to operate the service. If you configure a different server in the desktop app, activity goes to that server instead; its operator’s privacy practices also apply. Remote server connections require HTTPS. Localhost HTTP is supported for local development.
Your account’s pairing token is held by the Windows companion, not the extension.
Private windows
If you enable website tracking and allow the extension in Incognito or InPrivate, it reads the active private tab’s URL and title and sends them through the companion to your connected Thydo server, just like a regular tab. Productivity labels apply to the website or individual YouTube video. Without private-window permission, private-window site tracking is unsupported.
Retention, access, and deletion
Activity data is retained until you request deletion. To request access or deletion, email matej@rifelj.com from the address associated with your Thydo account. We may ask you to verify account ownership so that we do not disclose or delete another person’s data. You can also ask about infrastructure providers, backups, or the handling of your particular data.
Disabling or removing the extension, pausing or quitting the Windows app, or disconnecting the computer stops future tracking as applicable. These actions do not automatically delete activity already saved to your account.
Limited Use
We do not sell this data, use it for advertising, or use it to determine creditworthiness. We limit its use to providing and improving Thydo’s disclosed website-activity feature and the operations needed to run and secure it. Access and transfers are limited to those purposes and the exceptions permitted by the Chrome Web Store User Data Policy, such as complying with law or investigating security incidents.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Your controls
Tracking is off until you enable it in the extension. Click the Thydo extension icon to view the current website or pause and resume website tracking. Use the Windows tray menu to pause all desktop tracking, quit the companion, or inspect its local log. You can remove the extension from your browser’s extensions page.
Changes and questions
We will update this page when practices change and disclose material changes in the extension where required. Contact matej@rifelj.com with privacy questions.