LodgedPrivacy policy
The short version. Lodged saves what you choose to your Notion. What you save (the page's title and address, your note, selected text, and the article itself) goes from your browser directly to Notion; our server never sees it. The only thing Lodged reports to us is a daily count of how many saves worked or failed, with no identifier, and you can switch that off. There are no ads, and we never sell data.
Who we are
Lodged is made by Ronen Saviz ("we"). You can reach us at support@lodged.app.
What the extension handles and where it goes
| What | When | Where it goes | How long it's kept |
|---|---|---|---|
| Title, page address, your note, selected text, image address, and the article: its text, image addresses, cover picture, site icon, author and date | Only when you save | From your browser directly to Notion (api.notion.com) | In your Notion. Your browser also keeps the last 10 saves, plus any still waiting to sync, for the Recent list |
| Names and ids of the databases you shared with Lodged | When you open the popup | Read from Notion into your browser | In your browser until you disconnect |
| Notion access token | After you connect | Your browser's session storage | Until you close the browser |
| Notion refresh token | After you connect | Your browser's storage; sent to our token server only to get a new access token | In your browser until you disconnect or uninstall. Our server keeps no copy |
| One-time connection code | Once, when you connect | Notion to our token server, then back to your browser | Not stored |
| Number of saves, install date, your answer to the rating prompt | As you use Lodged | Stays in your browser | Until you uninstall |
| Daily counts: how many saves were delivered, failed (with the kind of error) or retried; how many connection attempts worked, were cancelled or failed; how many reconnects were needed; whether the Inbox was created. Plus the extension version and the date. No identifier and no page details | Once a day, for the day before | Our token server, which adds them to daily totals | The totals are kept to measure reliability. Switch it off in the popup under Something wrong?; that also deletes counts not yet sent |
| Self-check report | Only if you click "Email support with this report" | A draft in your own email app; you decide whether to send it | Contains statuses only: no tokens, page addresses, titles, notes or database names |
Our token server
Notion requires a secret key to connect an app and to renew its access, and a secret can't be kept inside a browser extension. A small server holds it. It receives the one-time connection code and your refresh token, passes them to Notion with our key, and hands the result back to your browser. It keeps no copy, never uses your tokens to access your Notion, and never receives anything you save. The same server takes the daily counts above, and once an hour the extension asks it for any service notice (for example during a Notion outage); that request carries nothing about you. It runs on Cloudflare, which processes these requests as our service provider. Like any web server it sees your IP address when your browser connects; we don't store it.
What we don't do
The extension contains no tracking, advertising or third-party scripts. The daily counts are the only thing it reports, and they can't be tied to you or to anything you save. We don't sell or share your data, don't use it for advertising or credit decisions, and don't use it for anything except saving to your Notion and keeping that reliable.
Permissions, and why
| Storage | Keeps your connection, settings and outbox in your browser. |
|---|---|
| Active tab and scripting | Read the tab you're on (its title, address, selected text and article) only when you open Lodged, press its shortcut or use its right-click menu. The article is read inside your browser, by code that ships with Lodged. |
| Identity | Opens Notion's own sign-in and permission screen. |
| Alarms | Retries saves that are waiting, and keeps your connection fresh twice a day. |
| Context menus | The right-click "Save … to Notion" items. |
| api.notion.com | Talks to Notion. It's the only site Lodged can reach on its own; any other page is read only when you ask, as above. |
Your choices
Disconnect in the popup deletes the tokens and database list from your browser; saves still waiting are kept until you reconnect or dismiss them. To revoke Lodged's access completely, remove it in Notion under Settings → Connections. Untick Share anonymous daily counts under Something wrong? to stop the counts. Uninstalling deletes everything Lodged stored in your browser. Pages you already saved live in your Notion and follow Notion's privacy policy.
Children
Lodged isn't directed at children under 13, and we don't knowingly collect anything from them.
Changes
If Lodged ever collects something new, such as payment details for a paid plan, we'll update this page before that version ships and say so in the extension's "What's new" note.
Contact
Questions or requests: support@lodged.app.