1. Overview
2px (formerly MarkFeed) is a Chrome Extension that captures visual feedback on web pages. This policy explains what data we collect, why, and how we protect it.
Operator: 2px ([email protected])
2. Data We Collect
2.1 Free Plan (Local Only)
On the Free plan, all data stays on your device. We do not collect, transmit, or store any data on our servers. Data is stored in your browser's IndexedDB under the extension origin.
2.2 Pro Plan (Cloud Sync)
When you upgrade to Pro and explicitly opt in to cloud sync, the following data is transmitted to our servers (Supabase, hosted on AWS):
- Marker data: Title, description, feedback type, priority, status, tags
- Page context: Page URL, page title, element CSS selector
- Position: X/Y coordinates of markers on the page
- DOM snapshot: Partial HTML of the targeted element (truncated to 1KB)
- Computed CSS styles: 9 CSS properties (fontSize, color, backgroundColor, position, display, width, height, margin, padding)
- Screenshots: Captured screenshots of the marked area
- Source code reference: Component file path (if available)
- Export history: Records of when and how marker data was exported (format, timestamp, included data types)
2.3 Data We Do NOT Collect
- Passwords or form input data
- Cookies or authentication tokens from visited websites
- Browsing history beyond the pages where you create markers
- Personal files from your device
- Full page HTML or complete DOM trees
3. How We Use Your Data
- Cloud sync: Synchronize markers across your devices (Pro only)
- Prompt quality scoring: Evaluate completeness of feedback for LLM-assisted bug fixing (computed locally)
- Export audit: Track export history for security compliance
We do not sell, share, or use your data for advertising. We do not train AI models on your data.
4. Chrome Extension Permissions
| Permission | Why We Need It |
|---|
activeTab | Access the current tab to capture markers and screenshots |
storage | Save markers and settings locally |
scripting | Inject the marker overlay UI onto web pages |
downloads | Export data as JSON files |
tabs | Get page URL and title for marker context |
<all_urls> | Allow markers on any website (including localhost) |
5. Data Storage & Security
- Local storage: Browser IndexedDB (encrypted by the browser)
- Cloud storage: Supabase (PostgreSQL on AWS), with Row Level Security (RLS) — you can only access your own data
- Screenshots: Stored in a private Supabase Storage bucket, accessible only by the uploading user
- Transit: All API communication uses HTTPS/TLS
6. Data Retention & Deletion
- Free plan: Data exists only in your browser. Clear it anytime from Settings > Clear All Data
- Pro plan: Cloud data is retained while your account is active. Soft-deleted markers are purged after 30 days
- Account deletion: Request deletion via [email protected]. All cloud data will be permanently deleted within 30 days
- Export: You can export all your data as JSON at any time from Settings
7. Your Rights (GDPR / CCPA)
You have the right to:
- Access: Export all your data as JSON
- Rectification: Edit or update your markers anytime
- Erasure: Delete individual markers or request full account deletion
- Portability: Export data in standard JSON format
- Object: Opt out of cloud sync at any time by switching to Free plan
8. Third-Party Services
- Supabase: Database and authentication (Pro plan only)
- LemonSqueezy: Payment processing (Pro plan purchases)
We do not use analytics, tracking pixels, or advertising SDKs.
9. Children's Privacy
2px is not directed at children under 13. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this policy. Changes will be posted on this page with an updated date. For significant changes, we will notify users via the extension.
© 2026 2px. All rights reserved.