Privacy Policy — PDF Note
Last updated: October 31, 2026
Publisher / contact: meonoi — opuo@meonoi.com
- The extension works fully offline without an account. PDFs you open and everything you create (notes, drawings, highlights, text, links) are stored locally in your browser and never leave your device unless you sign in.
- Signing in with Google is optional and only enables cloud sync so you can access your own PDFs and notes on another device.
- We do not show ads, do not use analytics or tracking, and do not sell or share your data with third parties.
Data stored locally (no account needed)
When you open a PDF and take notes, the following is stored in your browser's local storage (IndexedDB) on your own device:
- The notes, drawings, highlights, text annotations, and cross-reference links you create, and pasted images you add to notes.
- A content fingerprint of each opened PDF (a short cryptographic hash used only to re-attach your notes to the same PDF next time you open it).
This local data stays on your device and is removed if you clear your browser's storage for the extension.
Data handled only if you sign in (optional cloud sync)
Signing in uses Google Sign-In (via Firebase Authentication). If you choose to sign in and use cloud features:
- Account information: your Google account email, display name, profile photo, and a user identifier — used solely to authenticate you and to scope your cloud data to your own account.
- Your PDFs: when you choose "Save to cloud," the PDF file is uploaded to our storage provider (Supabase Storage) in a folder scoped to your account, so you can open it on another device.
- Your notes and annotations: synced to a cloud database (Google Firebase Firestore), scoped to your account.
A small serverless function (a Cloudflare Worker) verifies your Google sign-in in order to authorize access to your own cloud storage. It does not store your data; it only issues a short-lived access token. Cloud data is only ever accessible to your own authenticated account, enforced by server-side security rules.
How the data is used
Collected data is used only to provide the extension's features: authenticating you and storing/syncing your own PDFs and notes across your devices. It is not used for advertising, profiling, or any purpose unrelated to the extension, and is not sold or transferred to third parties except the infrastructure providers named above (Google Firebase, Supabase, Cloudflare) acting solely to store and serve your data.
Data retention and deletion
- Local data: remains on your device until you delete the note/annotation or clear your browser storage.
- Cloud data: PDFs and notes you saved to the cloud remain until you delete them (you can delete saved PDFs from the "My Documents" panel in the extension). To request deletion of all account data, contact us at the email above.
Changes to this policy
If this policy changes materially, the updated version will be posted at this same location with a new "Last updated" date.
Contact
Questions or data-deletion requests: opuo@meonoi.com