LEGAL_DOC — V1.0
PRIVACY
POLICY.
Last updated: March 29, 2026
01 — OVERVIEW
createthings ("we", "our", "the extension", "the app") is a creative workflow tool that helps you capture inspiration, analyze it with AI, and publish your work. This policy explains what data we collect, where it goes, and what we never do with it.
We built this for creators who care about their work. We have no interest in selling, monetizing, or mishandling your data.
02 — WHAT WE COLLECT
Notion OAuth Token
When you connect your Notion account, we receive an OAuth access token. This token is stored in a secure HTTP-only cookie in your browser session and is used exclusively to read and write to your own Notion workspace.
Page Content & Screenshots
When you capture a page, we receive the URL, page title, and optionally a screenshot or uploaded image. This data is sent to our server for AI analysis and then written directly to your Notion workspace. It is not stored on our servers beyond the duration of the request.
Extension Storage
The browser extension stores your Notion connection status and API base URL in chrome.storage.local. This data never leaves your device.
03 — WHAT WE DO NOT COLLECT
- ✓ We do not read, scan, or store the content of pages you visit.
- ✓ We do not track your browsing history.
- ✓ We do not collect personal information beyond what is required for Notion OAuth.
- ✓ We do not use analytics, advertising SDKs, or third-party trackers.
- ✓ We do not sell or share your data with any third party.
04 — THIRD-PARTY SERVICES
createthings integrates with the following third-party services to deliver its core functionality. Each service receives only the minimum data required.
Notion
Workspace storage and automation. Your data lives in your own Notion workspace. Notion's privacy policy applies to data stored there.
Privacy Policy →Google Gemini
AI visual and content analysis of captured screenshots and URLs. Images are submitted per request and not retained by us.
Privacy Policy →05 — HOST PERMISSIONS
The createthings browser extension requests access to all URLs (<all_urls>). This permission exists solely to inject a screenshot selection overlay when you choose
to capture a specific area of the current page.
The content script does not read page content, DOM data, form inputs, passwords, or any other page information. It renders a visual overlay, captures the screenshot on confirmation, and sends only the resulting image to the app — nothing else.
06 — DATA RETENTION
All inspiration data, analyses, projects, and journal entries are stored in your Notion workspace — not ours. You own it. You can delete it at any time by deleting the relevant pages or databases in Notion.
Server-side, we retain no persistent user data. Session cookies expire when you close your browser or disconnect your Notion account.
07 — CHANGES TO THIS POLICY
If this policy changes materially, we will update the date at the top of this page. Continued use of createthings after a change constitutes acceptance of the updated policy.
08 — CONTACT
Questions about this policy? Open an issue on the project repository or reach out directly via the contact listed on the Chrome Web Store listing.