Chevalet Note sends nothing about you anywhere, and makes no network request at all unless you ask it to.

THE ONE NETWORK CALL

There is exactly one network call in the shipped code: an optional check for a new version. It is off by default. It asks for its own permission the first time you press the button. All it does is read the public release list and compare one version number — it sends no cookies, no referrer, no identifier and no note content.

Turn it off, or never turn it on, and the extension makes no network request whatsoever. There is no analytics, no telemetry, no crash reporting and no remote script anywhere in it. Run Firefox with the extension in an offline profile and everything works exactly the same.

The manifest declares this explicitly, so Firefox itself can show it:
"data_collection_permissions": { "required": ["none"] }

WHAT IS STORED, AND WHERE

Everything lives in your own Firefox profile on your own machine.

Your notes, drawings, pasted images and revisions are kept in the extension's own IndexedDB — never in a website's storage, so a site can never read them.

Settings and per-site rules are kept in the extension's own local storage.

Which tabs have notes turned on or off is kept in Firefox's session store, which is what lets "notes off for this tab" survive a browser restart.

Nothing is stored on any website's origin. Nothing is synced. There is no account and no identifier of any kind.

WHAT SURVIVES, AND WHAT DOES NOT

Being honest about this matters more than sounding reassuring.

Your notes survive clearing your cache, your cookies and your site data — Firefox's cleaner deliberately excludes extension storage. They survive "Forget About This Site". They survive running low on disk space.

Your notes are lost if you use "Refresh Firefox", because that creates a brand new profile. They are lost if you uninstall the extension, because Firefox deletes an extension's storage along with it.

Those last two are why the ZIP export exists. An export is a plain zip holding your notes as one text file, your images as real image files, and a readable folder of markdown — openable in anything, with or without this extension installed.

PERMISSIONS

Website access is not granted when you install. You grant it from a button in the popup, at the granularity you choose: this site, this domain, or all sites. You can revoke it at any time from Firefox's own extensions panel, and your notes stay safely in the database while it is revoked.

Access to the release list is also optional, and is requested at the moment you first press "check for a new version" — never at install, and never in the background before you have asked for it once.

WHAT THE EXTENSION CAN SEE

While it is enabled on a page, the in-page layer reads the page's text. That is how a note stays attached to the paragraph you stuck it to when the page's wording changes. What it keeps is a short quote of the surrounding text, stored inside your own note record so the note can be found again. It is never transmitted, because nothing is ever transmitted.

CONTACT

Issues and questions: https://github.com/Chevalet/chevaletStickNoteExtension/issues