keyprompt

KeyPrompt Privacy Policy

Last updated: 2026-06-06

KeyPrompt is a Chrome extension built around a simple privacy promise:

Your data stays in your browser — unless you choose to connect an outside service (Notion or WorkFlowy), and then only that service ever sees it.

This page explains exactly what that means.

What KeyPrompt stores

KeyPrompt stores everything locally, in Chrome’s extension storage (chrome.storage), which lives on your computer inside your Chrome profile:

• The prompts you save (categories, labels, and prompt text).
• Your Notes scratch pad.
• Your settings — which cards are shown, their order, and the on/off state.
• The panel’s position, remembered per site.
• Any Notion or WorkFlowy API key you choose to enter to connect those services.

We do not store anything on a server. There are no accounts, no profiles, no usage metrics, no error reports, no crash logs — there is no KeyPrompt server at all.

Connecting Notion or WorkFlowy (optional)

KeyPrompt can show your own Notion pages or WorkFlowy outlines inside the panel. These integrations are off by default and only run if you enter an API key for them in Settings.

When you connect one:

• KeyPrompt sends your API key to that service’s official API — https://api.notion.com for Notion, https://workflowy.com for WorkFlowy — to read and (when you edit, add, or delete) modify the pages or outline items you point it at.
• These requests are made from the extension’s background service worker, so your API key is never exposed to the web pages you visit.
• Your key and your content are exchanged only with that one service. They are never sent to the developer or to any third party.

If you do not connect Notion or WorkFlowy, KeyPrompt makes no network requests at all.

What KeyPrompt does NOT do

• We do not send your data to any KeyPrompt server — there isn’t one.
• We do not use analytics, telemetry, tracking pixels, or any third-party SDKs.
• We do not read or store the content of pages you visit. KeyPrompt only reacts when you intentionally trigger it (Cmd/Ctrl+Click or the Alt+K shortcut), and it only writes into the field you chose.
• We do not load remote code. All of the extension’s code ships inside the package.
• We do not share, sell, or rent your data to anyone.

Why KeyPrompt requests the permissions it does

KeyPrompt’s manifest requests only what its features need:

• storage — to save your prompts, notes, and settings locally (chrome.storage).
• activeTab — so the Alt+K shortcut can show or hide the panel in the tab you’re currently viewing, without needing broad access to your tabs.
• Host access to https://api.notion.com/* and https://workflowy.com/* — used only when you connect those services, to talk to their official APIs. No other hosts are requested.
• Content scripts run on all sites (<all_urls>) — KeyPrompt needs to detect your Cmd/Ctrl+Click or Alt+K on whatever page you’re writing in. The content script only adds the panel; it does not read or transmit page content.

None of these permissions are used to read page content or to transmit anything except, when you opt in, your own data to Notion or WorkFlowy.

(Note: earlier versions also requested scripting, tabs, and contextMenus. Version 0.2.0 removed them.)

Your data, your control

Open the KeyPrompt settings page at any time to view, edit, or delete your saved prompts, manage your Notes, and connect or disconnect Notion and WorkFlowy. Uninstalling the extension clears all locally stored data, including any API keys. To revoke a connected service, remove its key in Settings and/or revoke the integration from your Notion or WorkFlowy account.

Changes to this policy

If this policy ever changes, the new version will be published at the same URL with an updated “Last updated” date. Material changes will also be noted in CHANGELOG.md.

Contact

Questions or concerns? Open an issue on the GitHub repository or email the maintainer.

This site is open source. Improve this page.

This site is open source. Improve this page.