Privacy Policy

DataDesk — Analyst Toolkit · Last updated: April 2026

Overview

DataDesk is a browser extension designed for data analysts. We are committed to being transparent about what data the extension accesses, stores, and transmits. The short version: we do not collect, sell, or share your personal data.

What data the extension accesses

Tables Tab

local only

Reads HTML content of the current tab to find and extract table data when you click Scan Page. This data is processed entirely in your browser and never transmitted anywhere. Nothing is stored after you close the popup.

Stats Tab

local only

All statistical calculations (mean, median, regression, forecasting) are performed entirely in your browser using JavaScript. No data is sent to any server.

SQL Tab — Format

local only

SQL formatting and syntax highlighting run entirely in your browser. No SQL is transmitted anywhere.

SQL Tab — AI Optimize

sends to OpenRouter

When you click ⚡ AI Optimize, your SQL query is sent to OpenRouter (a third-party AI inference service) along with your user-provided API key. No other data is sent. Your API key is stored locally in chrome.storage.local and never sent to anyone other than OpenRouter. Please review OpenRouter's privacy policy.

Notes Tab

local only

Notes are stored locally in chrome.storage.local on your device. They are never transmitted to any server unless you explicitly use the Team tab to push them to GitHub.

Team Tab — GitHub Sync

sends to GitHub

When you connect your GitHub account and push/pull notes, your notes are sent to GitHub Gist (a third-party service) using your user-provided Personal Access Token. The token is stored locally in chrome.storage.local. Gists created by this extension are public — do not push sensitive or confidential information. Please review GitHub's privacy policy.

Data Storage

All user data (notes, API keys, GitHub tokens, settings) is stored in chrome.storage.local — local to your browser, on your device only.
DataDesk does not operate any servers, databases, or analytics infrastructure.
We have no way to access your locally stored data.

Permissions used and why

activeTab — Required to scan the current page for tables when you click Scan Page.
scripting — Required to run the table extraction script on the current page.
storage — Required to save your notes, settings, and API keys locally.
host_permissions (api.github.com) — Required to push/pull team notes via GitHub Gist.
host_permissions (openrouter.ai) — Required to call the AI SQL optimization API.

No other permissions are requested. We request the minimum permissions required to provide the extension's features.

Third-party services

DataDesk optionally integrates with the following third-party services. These are opt-in only — you must explicitly connect them:

GitHub Gist (Team Notes sync) — GitHub Privacy Policy
OpenRouter (AI SQL optimization) — OpenRouter Privacy Policy

Children's privacy

DataDesk is designed for professional use by data analysts. It is not directed at children under 13 and we do not knowingly collect data from children.

Changes to this policy

We may update this privacy policy as the extension evolves. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or the extension's data practices, please open an issue on our GitHub repository.