# Hilitr — Privacy Policy

_Last updated: 2026-07-06_

Hilitr is a local-only browser extension. It does **not** collect, store, transmit, or
sell any personal data.

## What Hilitr does

When you activate Hilitr (by clicking its toolbar icon or pressing ⌘E / Ctrl+E) and
drag a rectangle, the extension takes a screenshot of the **currently visible tab** using
Chrome's `chrome.tabs.captureVisibleTab` API. That image is used only to render the
zoomed "spotlight" overlay on the same page, in your browser, in memory.

## Data handling

- **No data collection.** Hilitr does not read page content, form inputs, cookies,
  browsing history, or any personal or financial information.
- **No network access.** The extension makes no outbound network requests. The captured
  screenshot never leaves your device — it is held in memory and discarded when you
  dismiss the overlay (click or press Esc).
- **No storage.** Nothing is written to disk, `localStorage`, cloud, or any server.
- **No third parties.** No analytics, no tracking, no remote code.

## Permissions

| Permission | Why it is needed |
|------------|------------------|
| `activeTab` | Capture a screenshot of the tab you are actively presenting, only when you trigger the extension. |
| `scripting` | Inject the selection/overlay UI into the current tab when you activate Hilitr. |
| Host access (`<all_urls>`) | So the keyboard shortcut and overlay work on any page you present. Hilitr does not read or send the contents of those pages. |

## Contact

Questions: open an issue at https://github.com/kpeluso/hilitr/issues