HamHome Logo
HamHome
中文
Back to Home

HamHome Privacy Policy

Privacy Policy

HamHome browser extension privacy policy: what the extension stores in your browser, why it requests each permission, and what is sent to the AI, semantic search and WebDAV services you choose to enable.

Last updated:2026-10-10GitHub

1. Scope

This policy applies to the HamHome browser extension for Chrome, Edge and Firefox. HamHome is an open-source, local-first web clipper and tab manager for saving pages, text and images, searching saved content, and saving and restoring tab workspaces.

HamHome requires no account, and the developer does not operate servers that receive your collections. Data is sent to a service only when you use the features listed in Section 5.

This website uses Microsoft Clarity to analyze page visits and interactions. That is separate from your extension data; the extension itself contains no analytics or advertising code.

2. Data We Process

Collections: URLs, titles, descriptions and summaries, categories, tags, saved times and extracted text of page bookmarks; the quoted text and source of text clips; and the image URL, source page, size, format and dominant colors of image clips.

Additional content: local HTML/Markdown snapshots and page screenshots (visible area only) that you choose to save, plus search indexes, vector data, AI analysis cache and Agent conversations.

Tabs and settings: page URLs, titles, icons, order, pinned state and grouping in workspaces; Tab Group rules; UI preferences; and the AI, embedding and WebDAV settings you enter.

3. Where Data Is Stored

Collections, snapshots, screenshots, indexes, AI analysis cache, Agent conversations, workspaces and WebDAV settings are stored in the extension’s local storage and IndexedDB in your current browser.

Categories, UI settings, AI and embedding settings (including the API keys you enter), custom filters, pinned items and Tab Group rules are stored in the browser’s extension sync storage (storage.sync). If browser account sync is turned on, your browser syncs this data to other devices signed in to the same account; that process is handled by the browser vendor.

4. Browser Permissions

storage, unlimitedStorage: store collections, snapshots, screenshots, indexes and settings without hitting the browser’s default storage quota as data grows.

activeTab, scripting: read the current page and show the HamHome interface on it when you save the page, create a clip or open the in-page panel.

tabs: read tab titles, URLs, icons and pinned state to save and restore workspaces and organize tabs with rules. tabGroups (Chrome and Edge only): create and update native tab groups according to your rules.

contextMenus: add right-click entries for saving pages, text and images. bookmarks: import browser bookmarks and, when you choose, write organized bookmarks back to the bookmark bar. clipboardWrite: copy notes to the clipboard before saving them to Obsidian through its protocol. alarms: run scheduled WebDAV sync, the periodic bookmark health checks you enable, and expired-trash cleanup.

Access to all sites (<all_urls>): lets saving, clipping, page screenshots and the in-page panel work on any website, and allows the extension to connect to the AI and WebDAV endpoints you configure and to request bookmark URLs during health checks. HamHome reads page information only when you use a related feature or when an automation you enabled runs, such as AI tab grouping or periodic health checks.

5. Services That Receive Data

AI providers (your configured provider or local endpoint): page analysis sends the page URL, title, description and extracted text excerpts; text clip analysis sends the clipped text and its source; image clip analysis fetches the image from its original URL and sends the image together with its URL, caption text and source page information.

AI providers (continued): AI tab grouping sends the current tab’s title, URL and page metadata, plus some titles and domains of other tabs in the same window and the names of existing groups. The Agent sends your messages and the saved content it reads to complete the task, such as titles, URLs, summaries and text excerpts. The Agent does not read sensitive settings such as API keys or WebDAV credentials.

Embedding providers: when semantic search is enabled, titles, descriptions and text excerpts of saved items are sent to build the vector index.

Privacy controls: privacy domains and automatic privacy detection make matching pages skip AI analysis and, by default, screenshots; items on privacy domains are not sent to the embedding provider. Image analysis can be turned off separately in AI settings. Each third-party provider’s privacy terms govern how it handles data, and cloud API fees follow the provider’s pricing.

WebDAV (your own server): when enabled, the extension syncs structured data such as UI settings, bookmarks and their text, clips, categories, workspaces and Tab Group rules to the server you configure; deletions sync as lightweight records. AI settings, API keys, WebDAV credentials, local snapshot files and page screenshots are not synced.

Site icon service: to display site icons, the extension requests them from the third-party icon service Cravatar (cn.cravatar.com). Each request contains the site’s domain, not the full URL, title or page content.

Websites and local apps: bookmark health checks request bookmark URLs directly to see whether they are reachable, without sending cookies; periodic checks are off by default. Image clip analysis downloads the image from its original URL. The Obsidian workflow hands notes to the Obsidian app on your device through the clipboard and the Obsidian protocol.

6. Sharing and Sale of Data

HamHome does not sell your personal data and does not provide your collections to advertisers, data brokers or developer-run analytics services.

Apart from the browser sync storage described in Section 3 and the services listed in Section 5, the extension does not send your collections to any other third party.

7. Retention and Control

Your data stays in your browser until you delete items, remove snapshots or screenshots, reset extension data, uninstall the extension, or overwrite data through import. Deleted bookmarks stay in Trash for 30 days; after that, or when you delete them permanently, only a lightweight record remains so the deletion can sync.

You can review, edit, delete, export (JSON/HTML) and import your data inside HamHome; JSON backups do not include page screenshots. You can also clear local storage through your browser’s extension settings.

8. Security

HamHome avoids unnecessary external transfers. The API keys, WebDAV endpoints and credentials you enter are used only for the features you enable.

No device, browser environment or third-party service can guarantee absolute security, so please protect your device and external credentials carefully.

9. Updates and Contact

If our data practices change materially, we will update this page and revise the last updated date.

For privacy-related questions, please contact the project maintainer via GitHub Issues: https://github.com/bingoYB/ham_home/issues