PaperLink browser extension privacy policy, in brief
Version 3 ยท Effective 22 October 2026
This policy covers the PaperLink browser extension, and what PaperLink's servers record when
you use it. When it changes, its version goes up, and the extension asks you to agree again
before your next sign-in.
This is a summary. The full privacy policy gives
every detail, at the same version. You need to sign in to PaperLink to read it.
What the extension keeps
-
Your Session Credentials, the proxy username and password of your Extension Session, with
your Username and your Organization's name, in the browser's memory only. They're never
saved to disk, and they're gone when the browser closes.
- Its settings, and the version of this policy you agreed to, saved in your browser.
-
A diagnostics record, in the browser's memory. It reaches PaperLink only if you copy it and
send it to support yourself.
What PaperLink records
-
The sites you visit while your browser is Connected, and for a page loaded over plain HTTP
rather than HTTPS its full address, when you visit them, your IP address and your Username.
PaperLink keeps this for 365 days.
-
Each time the proxy refuses you a sign-in or a site: when, your Username, your IP address
or the site, and why. PaperLink keeps this for 365 days.
-
Each Extension Session, the grant that lets one browser use the proxy: when it started and
ended, the extension's version, the browser, and the IP addresses of its sign-in and its
latest status check or Disconnect. PaperLink deletes it 30 days after it ends. Its audit
log keeps the same details of its sign-in, its end and any revocation, except that latest
call, with no set retention period.
-
Error reports, when one of PaperLink's servers fails, with passwords and other secrets
removed.
The content of the pages you visit only passes through PaperLink. HTTPS traffic stays encrypted,
and PaperLink doesn't inspect it.
How it's used
Only to run, secure and support PaperLink. PaperLink Admins, the papernest staff who run
PaperLink, and papernest's security team see it. It's never sold, and never given to your
Organization.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data
Policy, including the Limited Use requirements.
Contact
For questions about this policy or your data, or for help with PaperLink, write to
paperlink-support@papernest.com.