Privacy Policy — Notilingo

Last updated: August 1, 2026

What the extension stores

Your API key. When you run /link in the Notilingo Telegram bot, it gives you a personal key. You paste this key into the extension’s settings. The key is stored locally in your browser via chrome.storage.sync (which may sync across your own signed-in Chrome browsers). The key is used only to authenticate your requests to the Notilingo capture server. It is never sent anywhere except to that server.

What the extension sends

The text you submit. When you click “Add” (or choose “Add to Notilingo” from the context menu on selected text), that text is sent over HTTPS to the Notilingo capture endpoint (https://capture.staffilocode.com), together with your API key in the request header. The server turns that text into flashcards tied to your Telegram account and delivers them to you in Telegram, exactly as if you had messaged the bot.
Text you add via the right-click menu. When you select text on a page and choose “Add to Notilingo” from the browser’s context menu, only that selected text is sent — the same way, over HTTPS, with your API key. The extension receives the selection from the browser at the moment you invoke the menu item; it does not read the rest of the page.

What the extension does not do

read, collect, or transmit the content of the web pages you visit (only text you explicitly select and add via the right-click menu is sent, and only at the moment you invoke it);
track your browsing, clicks, or history;
use analytics, advertising trackers, or third-party scripts;
request access to your tabs or to any website’s data — it asks only for the storage and contextMenus permissions (the latter powers the right-click menu item without granting access to page content).

Ad banners

The extension may display a small promotional banner fetched from the Notilingo server. Each time you open the extension popup, it makes a request to the Notilingo server (https://capture.staffilocode.com/banners) to fetch the current banner list and then loads the banner image from that same server. Like any web request, this means the server can see your IP address and the time of the request; it is used only to serve banners and is not used to build a profile of you or to track your browsing. No API key is sent with these requests. Banners are static images; they do not run scripts. Clicking a banner opens the linked page in a new tab.

Data sharing and retention

Text you submit is processed to create your flashcards and is stored in your Notilingo account (the same data as notes you send the bot directly). It is not sold or shared with third parties. To remove access, run /unlink in the bot — this revokes your API key immediately, and the extension can no longer send anything.

Contact

Questions about this policy: [email protected] (or via staffilocode.com).