# Privacy policy

Last updated November 10, 2026

## The short version

Dakira doesn't keep your data. There's no Dakira account and no analytics. Sign-in passes through a relay that stores nothing. Your saved links go from your browser or iPhone straight to your own Notion workspace. Your local copy and your settings stay on your device.

This policy covers the Dakira Chrome extension, the Dakira Shortcut for iPhone and iPad, and this website. Dakira is an independent project made by Mostafa Ahmed. In this policy, "we" means the people who make Dakira.

## What the extension reads from a page

Dakira reads a page only when you ask it to: when you open the panel, use a shortcut, or use the right-click menu. Then it reads the page's title and address, and the details the page publishes about itself, such as its description, site name and preview image. The only other page text it handles is text you select and choose to save, as a title or a highlight, and the text of the active tab when you click ✨. If you turn on *Follow active tab*, the panel also reads the address and title of each tab you switch to. Dakira doesn't run on pages in the background and doesn't record your browsing.

## What's stored on your device

Dakira keeps these on your computer, in Chrome:

- Sign-in tokens: an access token and a refresh token, with your Notion workspace's name, ID and icon, in Chrome's local storage. Only the extension's own pages can read them.
- A local copy of your saved items, in IndexedDB. For each item it holds the page ID, the address, a normalized address, the title, tags, a notes excerpt of up to 280 characters, the created and edited times, the collection and the thumbnail address. It never holds page bodies.
- Saves waiting in the offline queue, until they reach Notion.
- Your settings and your tag list.

None of this is sent to us. Chrome doesn't sync it to your other devices. Disconnecting Notion deletes the tokens and the local copy. The *Clear local data* button in Settings, under Privacy, deletes the local copy at any time. Uninstalling the extension deletes everything it stored.

## Signing in with Notion

Sign-in uses Notion's official login. Your browser receives a one-time code from Notion and sends it to a relay at auth.getdakira.com. The relay runs on Cloudflare Workers and exchanges that code for your access and refresh tokens. When the access token needs renewing, the extension sends the refresh token to the same relay for a new one. The relay sees the one-time code and the tokens only while they pass through. It stores nothing and logs nothing. The tokens then stay on your device. Dakira's Notion integration asks only to read, insert and update content. It requests no user information, so Dakira doesn't get your email address.

## On-device AI

Smart tags and TL;DR use Chrome's built-in AI. They run entirely on your device, and only when you click ✨. They read the text of the active tab at that moment, and that text is never sent anywhere. The suggestions appear in the panel and go to Notion only if you keep them and save. The first time, Chrome may download its on-device model once. If your device doesn't support Chrome's built-in AI, the ✨ buttons don't appear, and nothing falls back to an online service.

## What goes to Notion

When you sign in, you can add Dakira's template to your workspace from Notion's sign-in screen: a "Dakira" page with a "Links" database. New collections you create become databases under that page, and tags you add, rename or delete change the Tags options of that database.

When you save, Dakira sends the page's title and address, the date, your tags and your note, and the address of the preview image, to your Notion database through Notion's official API. Dakira also adds a bookmark of the page, so Notion can show a preview. A highlight adds the selected text as a quote, with a link back to the passage. A tab set saves one page with a bookmark for each tab. A reminder sets a read status and a reminder date on the item. This travels directly from your browser to Notion's servers. We never see it. Once it's in Notion, Notion's [privacy policy](https://www.notion.so/privacy) applies, and you can edit or delete it there like anything else in your workspace.

## The iPhone and iPad Shortcut

The Shortcut runs in Apple's Shortcuts app on your device. It doesn't use your Chrome sign-in. It uses its own Notion integration key, which you create in Notion and paste into the Shortcut yourself. The key is kept in the Shortcut and is sent only to Notion, with each save. When you share a link to it, it sends the link and the details you add to your Notion database. It doesn't send anything to us.

## This website

getdakira.com has no analytics, no cookies, no ads and no third-party scripts, and your browser makes no requests to other servers when you visit. The animation library GSAP is served from getdakira.com itself. Like any web host, our host, Hostinger, keeps standard server logs, such as IP addresses, the pages requested and browser type, to run and protect the service. We don't use these logs to identify or track visitors. If you email us, we use your email address and message only to reply to you.

## What we don't do

- We don't sell, rent or share your data. We don't have it.
- We don't use your data for advertising, profiling or training AI models.
- The extension doesn't load remote code or scripts. Everything it needs is bundled with it.

## Permissions the extension asks for

Most permissions are granted when you install. Optional permissions are asked for the first time you use the feature that needs them.

- Side panel (sidePanel): Shows the Dakira panel next to the page.
- Active tab (activeTab): Reads the tab you invoke Dakira on, only when you open it or use a shortcut or the right-click menu.
- Scripting (scripting): Reads the page details described above, or the page text when you click ✨, once, when you ask.
- Storage (storage): Keeps your settings, tag list and sign-in tokens on your computer.
- Context menus (contextMenus): Adds *Send to Dakira* and *Save highlight to Dakira* to the right-click menu.
- Identity (identity): Opens Notion's sign-in window.
- Alarms (alarms): Retries queued saves, runs the sync, and fires read-later reminders.
- Access to api.notion.com: Sends what you save to Notion.
- Access to auth.getdakira.com: The sign-in relay. Dakira doesn't send your data to any other server.
- Tabs (optional, tabs): Asked when you turn on *Follow active tab* or first use tab sets. It lets Dakira read the address and title of tabs you didn't open it on: the tab you switch to, or the tabs in a set you save. Chrome describes it as "Read your browsing history".
- Tab groups (optional, tabGroups): Asked with tab sets, to save a tab group as a set.
- Notifications (optional, notifications): Asked the first time you set a reminder, to show read-later reminders.

## Removing your data

- Disconnect Notion in Settings. Dakira deletes its tokens and the local copy, and revokes its access where Notion allows.
- Use *Clear local data* in Settings, under Privacy, to delete the local copy at any time.
- Uninstall the extension to delete everything it stored on your computer.
- Remove Dakira's access to your workspace in Notion, under Settings, then "Connections".
- Delete the Shortcut from the Shortcuts app, and remove the integration you created for it in Notion.

Anything you saved stays in your Notion database until you delete it there.

## Children

Dakira isn't aimed at children and doesn't knowingly collect anything from anyone, of any age.

## Changes to this policy

If Dakira changes how it handles data, we'll update this page and the date at the top before the change ships. If a change is significant, we'll mention it in the extension's release notes.

## Contact

Questions about privacy? Email hello@getdakira.com.
