Tackit

Privacy Policy

Last updated: October 31, 2026

Tackit (“the extension”, formerly called WebSheets) is provided by A. Adhly Azhar, trading as Dinah (“we”). This policy explains what data the extension handles, what we receive and why.

Your notes

Everything you create in Tackit is stored in your browser, using the browser’s extension storage, so Tackit keeps working without internet. While you’re signed in, your notes are also saved in your Tackit account on our server, so they are the same on every computer where you sign in. For each note we store:

• its title, text and color,
• how it is shown: its position and size, and whether it is pinned or collapsed,
• the address of the page (or website) it belongs to, and when the note was created and last changed,
• for a note attached to an element of a page: hints for finding that element again, such as the kind of element, a few of its attributes and up to 80 characters of its visible text (never what you type into a website’s forms).

Notes you wrote with an earlier version of Tackit, which kept them only in the browser, are saved to the account that is signed in on that browser after the update (or to the first account that signs in there).

Your settings are stored only in your browser. Tackit reads the address of the pages you visit only to find the notes that belong to them, inside your browser. It does not record or send your browsing history: the only page addresses we receive are those of pages where you created a note or whose notes you share. Apart from the element hints above and the title of a page whose notes you share, it does not collect or send page content, passwords you type into websites or form fields.

Your account

Tackit is free. To use it you sign in to a Tackit account. When you create one, we receive:

• your email address,
• your name, if you enter one,
• your password, which our sign-in service stores only in hashed form (we can’t see it).

If you forget your password, we email you a code, which you enter in Tackit to choose a new one.

If you choose Continue with Google, Google tells our sign-in service your name, email address and profile picture, and that you signed in. Google handles that sign-in under its own privacy policy.

For your account we store: your email address, name, when you signed up, when Tackit last checked your account (when you were last seen), and, for support, notes we add ourselves (for example about a request you sent us). If you share notes, your name is shown with them (see the next section).

Sharing notes by link

You can share all your notes on one page (also the ones you add there later) or a single note, by creating a link. For each link we store which page or note it shares, the page’s address, a title (the page’s title as your browser shows it, or the note’s title), whether it is View only or Can edit, and when it was created.

• Anyone who has the link can read the shared notes (their title, text and color, and when they were last changed) on our shared-notes web page, together with the link’s title, the address of the page the notes belong to and your name as it is in your account. Your email address is never shown. The page asks search engines not to index it, but people you give the link to can pass it on. Links contain a long random code, so they can’t be guessed.
• People who use Tackit and are signed in can add the link to their Tackit. The shared notes then appear for them on that page, with what is needed to show them there (such as the page address, position, size and element hints), and they are kept up to date. We store which accounts added a link; you see only how many people added it, not who they are.
• With a Can edit link, these signed-in people can change the title, text and color of the shared notes. Their changes are saved in your notes, in your account.
• You can switch a link between View only and Can edit, or stop sharing, at any time (My Sheets → Sharing). When you stop sharing, the link stops working, and the notes disappear for the people who added it the next time their Tackit syncs.

When you add a link that someone shared with you, we store that your account added it, so the notes show on every computer where you sign in. The owner sees how many people added the link, not who. You can remove it at any time (My Sheets → Sharing → Remove).

Data the extension sends while you use it

While you’re signed in, about once a day the extension checks your account. It sends:

• a sign-in token that identifies your account,
• a random identifier created by the extension for your browser profile (it contains no personal information; it lets us see which browsers your account is used in),
• the extension’s version number.

For each browser we store that random identifier, the version, and when it was first and last seen.

To keep your notes the same on every computer, the extension also sends, with your sign-in token:

• your new and changed notes (about two seconds after a change), and which notes you deleted,
• requests for changes made on your other computers and for notes shared with you: when a page loads (at most once a minute), when you open the Tackit popup or My Sheets, every five minutes in the background, and when you click Sync now.

When you create, change or stop a share link, add or remove a link someone shared with you, or edit a shared note, the extension sends that to our server too. Apart from the addresses saved with your notes and share links, it does not send the addresses of the pages you visit.

Buy me a coffee

Tackit may show an optional Buy me a coffee link, so you can send us a tip if you want to. The link opens Buy Me a Coffee (buymeacoffee.com), a separate service, in a new browser tab. If you send a tip, you do it on their website, under their own privacy policy; Buy Me a Coffee may share with us what you choose to leave with a tip, such as your name and a message. The extension sends nothing to Buy Me a Coffee (the link contains nothing about you or your account), and Tackit receives no payment information from it. Tackit works the same whether you send a tip or not.

IP addresses and technical logs

Our hosting providers keep short-lived technical logs of requests, which include IP addresses: Supabase for sign-ins and for requests from the extension and the shared-notes page, and Vercel for visits to our website (which hosts the shared-notes page and this policy). The shared-notes page sets no cookies and uses no analytics.

How we use this data

We use the data above only to:

• let you sign in and use Tackit,
• keep your notes in your account, the same on every computer where you sign in,
• show the notes you share to the people who have the link,
• send you the emails you ask for (codes for resetting your password),
• provide support (for example, when you can’t sign in),
• see how many browsers use Tackit and which versions, how many notes and share links accounts have, and prevent abuse.

We do not sell your data, share it for advertising, or use it for any other purpose. Our admin panel shows how many notes and share links each account has, never what the notes say. Your notes are not end-to-end encrypted: as the operator of the database, we can technically access them.

Service providers

• Supabase (hosting region: South Asia, Mumbai) runs our sign-in service and database and stores the data above on our behalf, including your notes and share links. The emails with codes are sent through Supabase, using an email delivery service.
• Vercel hosts our website, including the shared-notes page and this policy.
• Google, only if you choose to sign in with Google, under its own privacy policy.
• Buy Me a Coffee, only if you choose to send a tip, under its own privacy policy.

Retention and your choices

We keep your account data, your notes and your share links as long as your account exists.

• Deleting a note (in a browser where you’re signed in) deletes it from your account and, when they next sync, from your other computers. A small record without its content (the note’s id, its website and the time) stays, so your other computers learn about the deletion. If the note was changed on another of your computers before that computer learned about the deletion, the note is kept with that change.
• Clear all data (in Tackit’s settings) deletes all your notes from your account and from every computer when you’re signed in, and resets the settings in that browser. When you’re signed out, it only clears that browser.
• Signing out (My Sheets → Account → Sign out) first saves changes that aren’t saved yet (if it can’t, it asks you first), then removes your notes, and the notes shared with you, from that browser. They stay in your account and come back when you sign in again. Your account is kept.
• Uninstalling Tackit deletes the copy in that browser only; your notes stay in your account.
• Stopping a share link makes it stop working at once. We keep the stopped link’s record (what it shared, when, and which accounts had added it) while your account exists. When someone removes a link from their Tackit, the record that they added it is deleted.

To see what we store about you, to correct it, or to have your account deleted, contact us. Deleting your account deletes your profile, your notes, the links you made (they stop working), the record of links you added, and the list of your browsers from our database. Tackit then signs out in your browsers at its next account check. A copy of your notes that is still in one of your browsers stays there until you delete it (Clear all data, or uninstalling the extension).

Changes

If this policy changes, we will update the date above and describe important changes on the extension’s store page.

Contact

A. Adhly Azhar · Dinah · adhlyazhar@outlook.com