Privacy Policy

Last updated: September 12, 2026

SideHub ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how the SideHub browser extension handles data while providing a browser side panel for user-added websites.

Data Collection

SideHub does not collect, transmit, sell, or share personal data with us or third parties. The extension stores your configuration locally in Chrome and does not operate any analytics, tracking, advertising, or remote logging service.

Local Storage

SideHub stores the following data locally on your device using the browser's built-in storage API:

Your list of added web apps and their URLs
Group names, colors, ordering, and organization preferences
Extension settings such as language, theme, runtime/sleep preferences, and backup files you export or import
Locally cached favicon URLs for websites you add

This data never leaves your device and is automatically deleted when you uninstall the extension.

Permissions

sidePanel — Displays the SideHub interface in the browser side panel.
storage — Saves your app list and preferences locally.
tabs — Opens websites in normal tabs when needed, detects the current tab for "Use current page", observes favicon updates, and manages login handoff tabs.
favicon — Retrieves favicons for websites you add so the side rail is recognizable.
contextMenus — Adds an “Add to SideHub” item to the page and link context menus.
webRequest — Observes embedded iframe navigations and load failures inside SideHub so the extension can provide back, refresh, and fallback behavior. It does not block or modify ordinary tab requests.
declarativeNetRequestWithHostAccess — Applies session rules only for SideHub side-panel subframes of websites you add, to remove iframe-blocking X-Frame-Options and Content-Security-Policy headers so those sites can display in the panel. SideHub does not set User-Agent or mobile client hints, and does not modify ordinary browser tabs.
scripting — Registers a navigation helper only for websites you have granted access to, so SideHub can keep certain links inside the side-panel frame. The helper does not run in ordinary top-level tabs.
Optional host access to HTTP and HTTPS websites — Requested per website when you add or open a site. This lets SideHub load that site in the side panel, run the embedded-navigation helper, and remove iframe-blocking headers for that site only. SideHub does not request access to all websites at install time.

Host access is used only for websites you choose to add. SideHub does not use this access to build a browsing history, profile users, inject advertising, or transmit website content to us. It may read the current tab URL to prefill “Use current page”, update favicons, or finish a login handoff, but it does not store a browsing history.

Third-Party Services

SideHub does not use any third-party analytics, tracking, or advertising services.

Embedded Content

When you add a website to SideHub, that website may load inside an iframe in the side panel. The embedded site's own privacy policy applies to any account, cookie, form, or browsing data handled by that site. After you grant access to that site, SideHub may run a small helper script in the side-panel iframe to keep certain navigations inside the frame or open known login/external-only destinations in a normal tab. SideHub may also remove iframe-blocking response headers on those side-panel subframes so the site can display there. Ordinary tabs are not modified.

Remote Code

SideHub does not download or execute remote extension code. Extension code is packaged with the extension. Websites you open inside SideHub load their own web content in the same way they would in a browser tab.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this Privacy Policy, contact us at ichiryuu9005@gmail.com.

SideHub browser extension. This policy is published at iron90.github.io/sidehub/privacy.html.