Effective date: 23 August 2026 · Applies to Actor Tally browser extension, version 4.0 and later, on all supported browsers. (Previous effective date: 9 July 2026 — this revision expands the list of what is stored on your device to cover features added in 3.x and 4.0. Nothing about what leaves your device has changed: still nothing.)
Actor Tally cannot send your data anywhere, because it contains no code capable of connecting to the internet. Everything you log stays in your browser, on your device. We never see it. Nobody does, unless you show them. The rest of this document explains that in detail.
All of the following is stored locally, on your device only, inside your browser's extension storage:
Actor Tally can hold up to four separate logs ("pages") in one installation. Each keeps its own entries, aliases, places, photos and trash, and each is covered by everything in this policy. If you set a PIN, every page is encrypted with it.
None of this is transmitted, synced, uploaded, mirrored, or backed up anywhere by the extension.
Nothing. The extension makes no network requests of any kind. It contains no analytics, no telemetry, no crash reporting, no advertising code, no update pings, and no remote content. This is not a policy choice that could quietly change with an update — it is the product's core architecture, and the extension's source can be inspected to verify it. If a future version were ever to add any network capability, that would be a fundamental change to the product and would be stated plainly in the extension's changelog and store listing before you install it.
Nothing. There is no account, no sign-up, no email address, and no server operated by or for Actor Tally. We have no mechanism to view, retrieve, or reconstruct any user's data, including in response to a request — the data simply never reaches us.
If you set a PIN, your stored data is encrypted at rest on your device using keys derived from your PIN (PBKDF2 with 310,000 iterations and SHA-256, producing an AES-256-GCM key, all via your browser's built-in Web Crypto implementation — no custom cryptography). While your data is unlocked, the derived key is held only in temporary session storage so you don't have to re-enter your PIN for every log; it is discarded when the browser closes. Without a PIN set, data is stored unencrypted in your browser's extension storage, protected by your device's own security. Because encryption keys are derived from your PIN and exist only on your device, a forgotten PIN cannot be recovered by anyone, including us.
While a tab is locked it holds no decrypted data at all — the lock screen is not a cover over a loaded page; the page simply never reads or decrypts anything until the correct PIN is entered. On an unlocked dashboard, pressing Esc replaces it with an ordinary editable to-do list at any moment.
These are the same four permissions the extension has always requested; version 4.0 adds none. It requests no host permissions, so it has no standing access to any site. Features that might look like they need the network do not: the places map is a compressed public-domain vector dataset (Natural Earth) that ships inside the extension and is drawn on your device, and image exports are generated locally by your browser.
The extension is free and contains no ads and no purchases. If you choose to support development, donations happen entirely on third-party platforms (such as Patreon or a cryptocurrency network) that you visit yourself, outside the extension, under those platforms' own terms and privacy policies. The extension itself neither links out automatically nor knows whether you donated.
Actor Tally is not directed at children and is intended for adults.
If this policy ever changes, the updated version will be published at this address with a new effective date, and any material change will be noted in the extension's changelog. Given the architecture described above, the realistic scope of change is limited: a version of Actor Tally that transmits data would be a different product, and would be presented as such.
Questions about this policy: t.me/actor_tally (Telegram), x.com/actortally (X), or the support tab of the Chrome Web Store listing. There is also a support page with an email address.
This policy describes the extension as designed and shipped — a strictly local, zero-network tool. If you are technically inclined, you are invited to verify every claim above by inspecting the extension's code.