The short version. Everything Open Slate stores — your tiles, settings, notes, tasks and wallpapers — stays on your own device. The extension has no server, no analytics and no content scripts, so it cannot see the sites you visit. The only network requests it ever makes are for widgets you added yourself, and each one needs a permission you granted.
What is collected
Nothing. There is no analytics, telemetry or crash reporting of any kind, no advertising or tracking library, and no identifier assigned to you or your installation. No data is sold or transferred to anyone.
What is stored, and where
All of it locally, on the device you are using:
- Your settings, tiles, widget layout, notes and tasks are held in
chrome.storage.local. - Wallpaper images and videos, and any custom tile images, are held in IndexedDB. They are never uploaded.
- If you switch on Chrome's own settings sync, your preferences travel through your Google account like any other Chrome setting. That is off unless you enable it, per device, and it is handled by Chrome rather than by us.
You can export or erase everything at any time from the extension's settings, and uninstalling removes all of it.
Browser data the page reads
Some widgets show your own browser data: recently closed tabs, open tabs, bookmarks, history, downloads and most-visited sites. These use optional permissions that are requested at the moment you add the widget that needs one, and declining leaves the rest of the page working.
That data is read to draw the page in front of you and nothing else. It is never transmitted, never aggregated, and no profile is built from it.
Network requests
Open Slate makes no request on its own behalf. Every request below belongs to a widget you added, and needs a host permission you granted for that specific site. None carries an identifier, a cookie or an account, and responses are cached locally to keep the number of requests low.
| Request | Sent by | What it contains |
|---|---|---|
api.open-meteo.com |
Weather widget | The coordinates of the place you chose. No account or API key. |
get.geojs.io or ipwho.is |
Weather widget, during setup | Nothing but the request itself, answered with an approximate city. Called once while the widget is being set up, and not again once a place is set. |
api.coingecko.com |
Crypto widget | A list of coin ids and a currency code. |
| Feed and calendar addresses | Feeds and calendar widgets | Only the addresses you entered yourself, fetched one origin at a time with your approval for each. |
On location
Open Slate never asks for your location and never calls the browser's
geolocation API — the geolocation permission is not declared at
all. To place itself, the weather widget performs a single city-level lookup
based on your IP address, using one of the two services listed above. Those
services see your IP address, as any website you visit does; what comes back
is an approximate city, which is stored locally and never sent anywhere.
If you would rather not make that lookup, the widget falls back to your browser's timezone, and you can always type a town in by hand — which is also how a wrongly detected place is corrected.
Search
Nothing is sent anywhere as you type. Suggestions come from your own tabs, bookmarks, history and tiles, matched on your device. Submitting a search navigates to the engine you chose, exactly as the address bar would.
Remote code
All of the extension's code ships inside its package. There are no content scripts, no scripts loaded from a CDN, and nothing is evaluated at runtime. The responses above are parsed as data and never executed.
Children
Open Slate is not directed at children and collects no personal information from anyone, of any age.
Changes
If this policy ever changes, the updated version will be published on this page with a new date, and its history is visible in the extension's public repository.
Contact
Questions or concerns about privacy can be raised as an issue on the project's issue tracker, or reported privately through its security advisory form.