Permissions

Overview  ·  Actions  ·  Site rules  ·  Export & import  ·  Permissions  ·  FAQ

The extension installs with two permissions and no access to any website. Everything else is asked for at the moment it becomes necessary, and can be taken back.

Granted at install

Permission	What it is for
storage	Saving your shortcuts in your own browser profile. This is what chrome.storage.sync uses; the developer has no access to it.
scripting	Registering the key listener on pages, once you have granted page access. On its own it grants nothing — there is nowhere to register it yet.

Requested only if you bind an action that needs it

Permission	Which actions
sessions	Reopen closed tab
tabs	Copy current URL, Bookmark this page
bookmarks	Bookmark this page

Bind none of those three actions and none of those permissions are ever requested. Twenty-six of the twenty-nine actions need nothing extra.

Access to websites

Requested the first time you use a page-level shortcut, because a key press can only be detected on a page by code running on that page. You will see Chrome's own permission prompt, not ours.

While the access is granted, the extension inspects keydown events to compare them against your own shortcut list. Being precise about what that touches:

• Reads: whether the focused element is a text field, and the page's hostname (to apply your site rules). Not the page's text, not its links, not its forms.
• Writes: nothing, with two exceptions you cause yourself — if you bind a scroll or back/forward action it changes the page's scroll position or history, and if the browser's clipboard API is unavailable, Copy current URL briefly inserts a hidden textarea to perform the copy and removes it immediately.
• Transmits: nothing, ever. There is no server to transmit to.

Revoking

Remove site access from Chrome's extension settings at any time. The content script is unregistered immediately, so no newly loaded page receives it. Tabs you already have open keep the listener until you reload them — that is a limitation of how Chrome injects scripts, not a choice, and it is worth knowing if you revoke access because of a specific page.

Everything else — your saved shortcuts, the options page, the settings you exported — keeps working. Nothing is deleted.

What is never collected

No browsing history, no page content, no personal information, no analytics, no crash reports, no advertising identifiers. There is one narrow exception worth stating plainly: if you bind Copy current URL or Bookmark this page, the current tab's URL is used at that moment to carry out the action you asked for. It is not stored and not transmitted.

The full statement is in the privacy policy.