Privacy Policy

Last updated: October 18, 2026

1. Introduction

At GoblinClipper, we care about our users' privacy. GoblinClipper is a browser extension (Chrome) that saves web pages into your own Notion databases. It relies on a small server that handles the connection to Notion.

This policy explains, in plain words, what information we handle, why, where it lives and how to delete it.

Publisher and data controller: GoblinClipper, published by Mathias BRADICEANU, Strada Fagului 40F, 077010 Afumați, Romania. Contact: support@goblinclipper.com.

2. How the Notion connection works

You connect GoblinClipper to Notion through Notion's official sign-in (OAuth). In Notion, you choose which pages and databases GoblinClipper can access. GoblinClipper only uses Notion's official public API: never a private API, never your Notion session cookies.

When you connect, Notion issues two access keys (an access token and a refresh token). They pass through our server while it talks to Notion, then are handed to the extension. When access needs renewing, the extension sends the refresh token back to our server, which passes it to Notion and returns the new keys. In both cases these keys are used without being kept: they are never stored on our server and stay in your browser.

3. Information we store on our server

Our server only keeps what it needs to recognize you and count your usage:

• Your Notion account: your Notion user ID, your name and your email address, as Notion sends them when you connect.
• Your connection: the ID and name of the connected Notion workspace, and the ID of the connection ("bot") Notion creates.
• Your session: a session key that lets the extension identify itself to the server. We only keep a fingerprint of it (a SHA-256 hash), never the key itself, with the date it was created and last used.
• Your usage: the number of pages saved each month.

Our server does not store the content of the pages you save, nor their addresses, titles, selected text or tags.

Like any host, our hosting provider may keep technical logs (for example IP address, date and requested address) to run and secure the service.

4. Information kept in your browser

The extension keeps the following in your browser's local storage (chrome.storage.local), on your device:

• your GoblinClipper session key;
• your Notion access keys (access and refresh tokens);
• the name and icon of the connected Notion workspace;
• the Notion databases you picked, their column layout and your default values;
• a copy of those databases' structure, to work faster;
• the send queue: pages waiting to be sent to Notion (title, address, selected text, tags and chosen values);
• your recent tags for each database;
• your language and first-day-of-week preferences.

Two of these are sent to our server without being stored there as is: the session key, with every request the extension makes to the server (we only keep the fingerprint described above), and the Notion refresh token, when access needs renewing (it is passed to Notion and not kept). Nothing else is ever sent to us.

5. What the extension reads on web pages

The extension reads the open page (title, "og:title" preview title, address, selected text, site icon and preview image) only when you open it or use its right-click menu. With the right-click "Save this link to Notion" action, it reads the link's address, and its text when the browser provides it. It does not read your browsing history and does not read any page in the background.

When you save a page, that information and the values you choose are sent directly from your browser to Notion, into your own workspace, without going through our server. When you open the extension, it may also ask Notion whether the page's address is already in the chosen database, to warn you about a duplicate. That request also goes directly from your browser to Notion.

6. How we use your information

• Providing the service: connecting you to Notion, renewing access, showing your account and counting saved pages. Legal basis: performance of our agreement with you, that is our terms of use.
• Security: preventing abuse and protecting the service. Legal basis: our legitimate interest in keeping the service safe and available.

We use no analytics or tracking tools, we show no ads, and we sell no data.

7. Sharing data with third parties

No personal data is sold, rented or shared for commercial purposes. We rely on these providers to run the service:

• Vercel: server hosting.
• Neon: the server's database.
• Notion: your own workspace, where your pages are saved, under Notion's own terms and privacy policy.

If a paid plan is ever offered, payments will be processed by Stripe, and this policy will be updated beforehand.

8. Where your data lives and transfers outside the European Union

The server runs, and its database is hosted, in the European Union, in Frankfurt (Germany).

Vercel and Notion are companies based in the United States, so data may be transferred to them. These transfers rely on the safeguards those companies provide, namely the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.

9. How long we keep your data

We keep the server's information for as long as your account exists. It is deleted when you ask us.

10. How we protect your data

We apply industry-standard security measures: encrypted connections (HTTPS), session keys stored only as fingerprints, and Notion access keys never stored on the server.

11. Your rights

Under the GDPR, you have the following rights:

• Access: ask for a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask for your data to be deleted.
• Restriction: ask for the processing of your data to be restricted, for example while a dispute is checked.
• Portability: receive your data in a common format.
• Objection: object to processing based on our legitimate interest.

To exercise these rights, write to support@goblinclipper.com. We answer within one month, which may be extended in the cases the GDPR allows; we will tell you if so. You can also lodge a complaint with the data protection authority of your country.

Deleting your data:

• In the extension's settings, "Sign out" removes from your browser your session key, your Notion access keys, your chosen databases, their cached structure and your recent tags. The send queue, column settings and preferences stay on your device until you uninstall the extension, which removes everything it keeps in your browser.
• To delete the data on our server, write to support@goblinclipper.com.
• You can remove GoblinClipper's access at any time from Notion, in your workspace settings (Connections).

12. Cookies

GoblinClipper uses no cookies, and no advertising or analytics trackers.

13. Chrome Web Store

The use of information received from Google APIs and Chrome will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

14. Changes to this policy

This policy may change. The date of the last update is shown at the top of the page. We invite you to check it regularly.

15. Contact

For any question or request about this policy, you can write to us at: support@goblinclipper.com