NAP — Privacy Policy

Chrome Extension — .nap repo reader
Last updated: May 26, 2026

What the extension does

NAP opens a side panel alongside GitHub pull requests. It clones a .nap repository into your browser and displays mini-book chapters, napkin specs, and agent logs in a nav tree with an editor and terminal.

What data is accessed

• Current tab URL — the extension reads the URL of the active GitHub tab to detect review links (URLs with a #nap-repo=... fragment).
• Repository contents — the extension clones .nap repositories (from GitHub or GitLab) into IndexedDB, a local browser-only database. Repository data never leaves your browser.
• GitHub API — when viewing a pull request, the extension fetches PR diff ranges from the GitHub API to enable line-level navigation. If you provide a GitHub Personal Access Token, it is sent only to api.github.com.
• GitLab API — if your .nap repo is hosted on a GitLab instance, your GitLab PAT is sent only to that GitLab host during clone and fetch operations.
• Tokens — GitHub and GitLab Personal Access Tokens are stored locally in chrome.storage.sync (Chrome's built-in encrypted sync storage). They are only transmitted to their respective API hosts.

What data is NOT collected

• No analytics or telemetry of any kind
• No tracking pixels, cookies, or fingerprinting
• No data is sent to any third-party service
• No browsing history is recorded or transmitted
• No user behavior data is collected

Data storage

• IndexedDB — cloned repository files, stored locally in the browser. Cleared when you reset a session or clear browser data.
• chrome.storage.sync — tokens and preferences. Synced across your Chrome instances if you are signed into Chrome. You can clear this from the extension's settings.

Third-party services

The extension communicates only with:

• github.com / api.github.com — to clone repos and fetch PR data
• Your configured GitLab host — to clone GitLab-hosted repos

No other external services are contacted.

Permissions

• sidePanel — opens the side panel UI
• storage — stores tokens and preferences
• activeTab — reads the current tab URL
• tabs — queries tab information for URL detection

Contact

For questions about this privacy policy, open an issue at github.com/diunko/nap-privacy/issues.