What we know about you, and what we can't know.

The short version

• The Magpie extension is local by default. Your boards, clips and notes live in your browser. We run no telemetry in it and cannot see what you collect.
• Data reaches our servers only if you create an account and turn on sync — then we store exactly what sync needs, to give it back to you on your other devices.
• Payments are handled by Stripe as merchant of record. We never see your card.
• Our website uses Google Analytics and the Meta pixel — in the EU/EEA/UK only after you say yes; elsewhere on by default, with an opt-out. The extension uses neither.
• You can export everything as files, and delete your account — and every byte we hold — yourself, any time.

The extension: local by default

Everything you capture — images, screenshots, text snippets, links, boards, tags, notes — is stored in your browser's local database (IndexedDB) on your machine. With no account, nothing is transmitted to us or anyone else. There is no usage tracking, no telemetry, and no analytics inside the extension. The optional "mirror to files" feature writes copies to your own disk, with no network involved.

These claims are checkable: open your browser's devtools and watch the network panel.

AI with your own key (optional)

If you enter your own OpenRouter API key in the extension, AI features (captioning, tagging, text recognition, search embeddings) send the item being processed — an image thumbnail or snippet text — directly from your browser to OpenRouter under your account, governed by OpenRouter's privacy policy. None of that traffic passes through our servers. No key, no AI traffic.

If you create an account and sync

Sync is opt-in and exists so your collection can follow you across devices and into the web app. To provide it (our legal basis: performing our contract with you), we store:

• Account: your email address; if you sign in with Google, the name and email Google provides.
• Your collection: boards and items — titles, tags, notes, source URLs, snippet text, recognized text — in our database (hosted with Supabase); image files and thumbnails in object storage (Cloudflare R2); search vectors derived from your items.
• Plan state: your subscription plan, its status and period, your Stripe customer and subscription IDs, storage usage, and coarse usage counters that enforce fair-use limits.

We don't browse, analyze, or monetize your collection. It is stored to be given back to you.

Search and ✦ Ask on the web app

When you search in the web app, your query text is sent to OpenRouter (under our key this time) to compute an embedding for ranking your own items. On Pro, ✦ Ask goes one step further: your question and the text fields of the clips it retrieved (titles, tags, notes, recognized text — never the images themselves) are sent to OpenRouter to compose the answer. We don't store your queries, questions or answers; the only record kept is a monthly usage count.

Capture keys

To capture from an iPhone's share sheet, you mint a capture key on your account page and paste it into the Magpie Shortcut. A capture key can add items to your collection and nothing else — it cannot read what you've already saved. We store only a one-way hash of it, so a key can never be recovered or shown to you again; we record the name you gave it and the day it was last used, never what was captured with it. Revoke any key from your account page at any time, and it stops working immediately.

Payments

Paid plans are sold through Stripe acting as merchant of record. Stripe collects and processes your payment details, billing address and applicable taxes under Stripe's privacy policy. Card numbers never touch our servers; we receive and keep only your plan, its status, and Stripe's reference IDs.

Sign-in and email

Signing in with an email code sends that one-time code through Resend, our transactional email provider. We send no marketing email. Signing in with Google uses Google's OAuth; we receive your email address and basic profile, nothing more.

Analytics & cookies (website only)

magpie.ee — the landing page and the web app — uses Google Analytics to understand aggregate usage (pages viewed, rough geography, how people find us), and the Meta pixel to measure how well our ads bring people here (landing-page views and clicks on our "Add to Chrome" links). How we ask depends on where you are, which we infer from your browser's timezone alone — no IP lookup. In the EU, EEA and UK we ask first: neither sets a cookie or sends anything until you accept the banner. Elsewhere they are on by default under an opt-out model, and we honor your browser's Global Privacy Control signal as an opt-out. Either way, they never see what you collect. When active, they share those usage and ad-conversion signals with Google and Meta per Google's and Meta's privacy policies. The web app also sets strictly-necessary session cookies to keep you signed in. The extension contains no analytics of any kind.

Retention and deletion

• While your account is active, synced data is kept so sync works.
• If your subscription lapses, your cloud copy goes read-only and is kept for 12 months, then deleted. Your local copy is never touched — it's a copy, not a cage.
• You can delete your account yourself (web app → account → delete): it wipes your database rows and every stored image, verifiably and immediately.
• Deleting an item removes its stored bytes; a small tombstone record remains briefly so deletions sync across devices.

Your rights

We're an Estonian company, so the GDPR applies in full. You have the right to access, correct, export, and erase your personal data, and to object to or restrict processing. Most of these are built in: "export everything" gives you your data as ordinary files; account deletion is self-service. For anything else, email hey@undefined.ee. If you're unhappy with us, you can complain to the Estonian Data Protection Inspectorate (aki.ee) or your local supervisory authority.

Who processes data for us

• Supabase — database & authentication
• Cloudflare — image storage (R2)
• Vercel — website hosting
• Stripe — payments, as merchant of record
• Resend — sign-in code emails
• Google — analytics (website), optional sign-in
• Meta — ad measurement (website); opt-in in the EU/EEA/UK, opt-out elsewhere
• OpenRouter — web-app search embeddings and ✦ Ask answers; extension AI only under your own key

The small print

Magpie isn't directed at children under 16. If this policy changes in ways that matter, we'll say so on this page and, for account holders, by email. Questions: hey@undefined.ee.