Denote Extension Privacy and Cookies Policy
Your privacy is important to us. Learn what the extension accesses and how we protect your information.
This policy explains how Denote Inc Sub, a company registered in Singapore, handles information when you use the Denote Chrome extension. For our website and web app, the main Privacy and Cookies Policy at denote.net/privacy also applies. Together, these documents explain what we collect, how we use it, how long we keep it, and the rights you have.
Table of Contents
1. Information the Extension Collects and Why
The Denote Chrome extension is an ad research tool. It runs only on the ad libraries and ad transparency pages listed in Section 2, and it collects the minimum it needs to work:
Page and ad data the extension reads
When you open a supported ad library page, the extension reads the publicly visible ad data on that page: ad creatives (images and videos), ad copy and landing page text, advertiser or page names, and the metrics the platform itself publishes — for example ad start dates, placements, and, where available, EU transparency reach and spend ranges. This happens only for the ads you view, filter, or save. The extension never reads anything you type into a page.
Device and technical information
We automatically receive limited technical data so we can keep the extension working and secure: IP address, browser type and version, operating system, language and region settings, extension version, and timestamps. We use this to authenticate you, diagnose errors, and measure aggregate usage. We do not collect mobile advertising identifiers, device app lists, precise location, or biometric data.
What we never collect: we do not read or store your passwords, form inputs, private messages, email contents, or files, and we do not access pages outside the supported ad libraries listed in Section 2. This includes our own code — the extension does not run on your other tabs and does not build a history of where you browse.
If you create a Denote account or subscribe, we also hold the information you provide on our website: your name and email address, your workspace or team name, and your subscription details. Payment and card information is collected directly by our third-party payment processor, and Denote does not store your full card number.
2. Browser Permissions and Site Access
When you install the Denote extension, your browser asks you to approve certain permissions. Here is exactly what each one is for:
Access to supported ad library pages
This lets the extension read and analyse page content on the ad libraries and ad transparency pages it supports — Facebook Ad Library, TikTok Creative Center and TikTok Ad Library, Instagram, Pinterest Ads, Google Ads Transparency Center, YouTube Ads, LinkedIn Ad Library, Shopee, and Etsy — and show its tools directly on the page. On any other website the extension stays idle. We do not collect sensitive information such as passwords, personal messages, or form inputs.
Storage
This lets the extension keep your preferences, saved items, and settings in your browser's local extension storage so the product is fast and remembers your choices. Your sign-in token, default platform, selected board or folder, current team, and plan are stored here and stay on your device.
Web request access
The extension uses the browser's web request permission to recognise the ad data that the ad library pages themselves load, so that saved and exported ads match exactly what you see on screen. It is used only on the supported ad library pages listed above and never to record your browsing history.
How we use this information
In addition to the purposes described above, we use the information we collect to operate, secure, and improve the extension and related Services. This includes:
- Providing core features such as ad search, filters, ad analysis, boards, and ad downloads.
- Saving your preferences and keeping your session working.
- Authenticating you and applying the correct plan and credits to your workspace.
- Responding to support requests and user inquiries.
- Keeping the extension secure, detecting abuse or fraud, and enforcing our Terms.
- Measuring and improving performance, stability, and reliability.
- Communicating product updates, feature releases, or service-related notices.
We process personal information in accordance with applicable data protection laws, including the EU and UK General Data Protection Regulation (GDPR) where it applies, and we only collect and use data that is necessary to provide and improve the Services. We do not use your personal information for cross-context behavioural advertising.
3. How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not hand it to data brokers or ad networks.
We share a limited amount of information with service providers that help us run the extension and our infrastructure, process payments, measure aggregate usage, and answer your support requests. Each provider is bound by a written agreement that limits it to processing your information on our instructions.
We only share information in these limited situations:
- With service providers and vendors that help us operate the extension and the Services, such as cloud hosting and content delivery, cloud storage for ad creatives you save, analytics, live chat support, and payment processing.
- With affiliated entities or subsidiaries that support our internal operations, subject to this policy.
- As part of a merger, acquisition, financing, reorganisation, or sale of assets, where user information may be transferred as part of the business.
- Where required by law, regulation, legal process, or a lawful request from a public authority.
- Where we believe disclosure is necessary to protect our rights, prevent fraud or abuse, keep the Services secure, or investigate a potential violation of our Terms or applicable law.
We will not share your information for any other reason without your explicit consent.
4. Cookies, Local Storage and Consent
Cookies and local storage
Cookies are small data files stored by your browser. The extension relies mainly on browser extension storage and a limited set of cookies for signing you in, remembering your settings, and keeping the product fast. We do not use cookies or extension storage to track your browsing activity outside the supported ad library pages. Non-essential cookies and analytics scripts are not meant to run before you agree to them: where the law requires consent, we do not load them until you have given it, and you can withdraw consent at any time.
Your consent
We do not load non-essential cookies or analytics scripts before you consent to them, and you can withdraw your consent at any time. Where consent is not required by law, we rely on our legitimate interest in keeping the Services secure and working correctly, and you can object to that processing at any time.
Managing cookies and extension storage
Most browsers let you control cookies and site data through their settings, and you can manage or clear the extension's local storage from your browser's extension settings. Removing this data may sign you out or reset your preferences, but it does not affect your Denote account.
We do not combine data across different websites, devices, or browsers for cross-site tracking or advertising purposes. The extension is a browser product and does not use mobile SDKs or mobile advertising identifiers such as IDFA or Android Advertising ID.
5. Your Choices and Controls
You are in control of what the extension can see and do. We do not run third-party behavioural advertising and we do not sell your personal data; collection is limited to what is necessary to provide and improve the extension.
You can change your settings at any time from your browser and from the extension itself — for example by limiting site access permissions, disabling specific features that process page content, or clearing the extension's local storage.
Managing data collection in the extension:
- Disable or remove the extension at any time from your browser settings.
- Restrict site access so the extension can run only on the ad library pages you choose.
- Clear locally stored data from your browser's extension or storage settings.
- Opt out of analytics through your browser's cookie and tracking controls.
Disabling certain permissions or features may reduce the extension's functionality.
The extension never reads pages outside the supported ad libraries, and it does not use mobile advertising identifiers or support interest-based advertising on mobile devices.
6. Third-Party Service Providers
We keep our supplier list deliberately short. Each provider below is bound by a data processing agreement and may use your information only to provide its service to us — never for its own advertising.
The third-party services we rely on:
- Cloud infrastructure and content delivery — third-party cloud providers that host our website and deliver assets.
- Cloud storage — Alibaba Cloud OSS (US West region), used to store the ad creatives you save to your workspace.
- Analytics — Google Analytics 4 (Google LLC), used to measure aggregate website traffic and feature usage.
- Live chat and support — Crisp (Crisp IM SAS), used to power the in-app chat widget when you contact us.
- Payments — our third-party payment processor collects and processes your subscription payment details. Denote does not store your full card number.
We do not permit these providers to use your information for their own advertising or marketing. The extension and our website may also link to third-party sites; those sites have their own privacy policies and we are not responsible for them, so please review their policies before sharing information with them.
7. Information Security and International Transfers
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS) for everything sent between your browser, the extension, and our servers, access controls and least-privilege permissions internally, regular reviews of our collection and processing practices, and firewalls on servers running in secure data centres. Denote Inc Sub is based in Singapore, and our service providers may process your information in the United States, Singapore, and other countries; where we transfer personal information out of the EEA or the UK we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. No method of transmission or storage is perfectly secure, so while we work hard to protect your information, we cannot guarantee absolute security.
8. Data Retention and Deletion
We keep personal information only for as long as we need it for the purposes described in this policy. Preferences and cache stored in your browser stay on your device and disappear when you uninstall the extension or clear its data. Ad creatives and ad metadata you save are kept while your account is active, and are permanently deleted from our production systems immediately when you delete your account — this is a real deletion, not a flag on a database row. Backup copies are purged on a rolling basis within 30 days. Aggregate analytics are retained in a form that no longer identifies you. Billing and tax records are kept for as long as tax and accounting law requires, and support conversations for up to 24 months. To request deletion of your account and data, or a copy of your data, email us at [email protected] — see Section 9.
9. Your Rights
Depending on where you live — including if you are in the EEA, the UK, Switzerland, Australia, or California — you have the following rights over the information the Denote extension handles. We honour these requests regardless of where you are based.
Access: request a copy of the personal information we hold about you and confirm what we do with it. We will respond within a reasonable period.
Rectification: ask us to update or correct any personal information that is out of date, incorrect, or inaccurate, free of charge.
Erasure: ask us to delete your account and the personal information we hold about you. We delete it from our production systems immediately, and backup copies are purged within 30 days.
Data export and portability: ask us to provide your data in a portable, machine-readable format so you can move it elsewhere.
Restriction and objection: ask us to restrict, or object to, certain processing, including marketing and any profiling.
Withdraw consent: withdraw your consent at any time where we rely on consent, for example for marketing emails or non-essential cookies.
Complain: lodge a complaint with your local data protection authority. We do not discriminate against you for exercising any of these rights.
To exercise any of these rights, email us at [email protected] from the address on your account. Account deletion and data export requests are currently handled by our support team through this address, and an in-product control for both is on our roadmap.
10. Changes to this Policy
We may update this Privacy and Cookies Policy from time to time, for example when we ship a new extension feature or add a service provider. When we make a material change we will post the updated policy here, update the "last updated" date above, and, where the change is significant, notify you in the extension or by email before it takes effect. We encourage you to review this page periodically.
Questions About This Policy?
If you have any questions about this Privacy Policy or how we handle your personal information, please don't hesitate to contact us.
