Privacy Policy

Last updated: July 16, 2026

This policy explains what the gnibs browser extension and the gnibs.com service collect, why, and what your choices are.

Who we are

gnibs is operated by Loop Social Inc., a Delaware corporation (“Loop Social”, “we”, “us”). We provide a browser extension and the website gnibs.com that let you highlight, annotate, and react on web pages, and see public annotations others have left on the same pages. Contact: privacy@gnibs.com.

The short version

We collect the annotations you create and the address of the page you attach them to. That is the product.
We use your gnibs account login so your annotations are saved as you.
We do not track your browsing, sell your data, run ads, or include third-party analytics or trackers in the extension. The only usage measurement is first-party and aggregate (e.g. a daily count of overlay opens) and never includes the pages you visit.
We read text from a page only to place your annotations, and only on pages where you open gnibs.

What the extension accesses, and why

The annotations you create. When you highlight text, write a note or reply, or drop a reaction, we store that content together with: the URL of the page it is attached to, the anchoring information needed to re-find the spot (including the snippet of text you highlighted), the visibility you chose (public or private), and your account identity as the author. This is necessary for gnibs to save your annotations and show them back to you and — for public annotations — to other gnibs users on the same page.

Page content, transiently. To anchor an annotation to the right place, gnibs reads text from the current page. This happens only on pages where you open gnibs, only in your browser, and is not collected or transmitted — except the specific snippet you choose to highlight, which is stored as the anchor for your own annotation.

Your login. The extension reuses your existing gnibs.com session. A small script that runs only on gnibs.com reads your first-party session token and stores it locally in the browser (chrome.storage). The token is sent only to the gnibs backend, as proof of who you are. The extension never sees or stores your password, and the websites you annotate never receive your gnibs account information.

Local settings.We store small bits of state in your browser: whether the overlay is open, your cached login token, and a marker of which notifications you’ve already been shown. These stay on your device.

Notifications.About every five minutes (and when you sign in), the extension asks the gnibs backend whether anyone has replied to or mentioned you, so it can show an in-page notice. This checks your account’s activity only; it does not report on the pages you’re visiting.

Usage counts. So we can tell whether gnibs works well, we keep first-party, aggregate usage statistics: a daily count of how many times the overlay was opened, and — for signed-in accounts — a flag that your account used gnibs on a given day. These counts contain no page URLs and no browsing history, involve no third-party service, and live in the same gnibs database as your annotations.

What we do NOT do

We do not record or store your browsing history. A page’s URL reaches our servers only when you open gnibs on that page, to load or save its annotations.
We do not use third-party analytics, tracking, advertising, or fingerprinting in the extension. Our only usage measurement is the first-party, aggregate counts described above — never page URLs, never browsing history.
We do not sell or rent your personal data, and we do not share it with third parties except the service providers strictly needed to run gnibs (see below).
We do not use your data to assess creditworthiness or for lending.
The extension executes no remote code; all of its logic ships in the package.

Where your data goes

Annotations and account data are stored with our hosting and database provider (Supabase) on our behalf, under access controls (row-level security) that limit each record to the people allowed to see it. Authentication is handled via gnibs.com using magic-link email sign-in. These providers process data only to operate gnibs.

Visibility of your annotations

Annotations you mark public are visible to other gnibs users who view the same page. Annotations you mark private are visible only to you. Tag/mention-based sharing makes an annotation visible to the specific people you direct it to. Treat anything you post as public unless you set it otherwise.

Your choices and rights

Export: you can export your annotations to Markdown or W3C Web Annotation JSON from the gnibs panel at any time.
Delete: you can delete individual annotations. To delete your account and associated data, contact privacy@gnibs.com.
Stop collection:disable or remove the extension at any time from chrome://extensions. Signing out of gnibs.com ends the extension’s ability to post as you.
Depending on where you live (e.g. EEA/UK, California), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Contact privacy@gnibs.com to exercise them.

Data retention

We keep your annotations until you delete them or close your account. Local state (settings, cached token) lives in your browser until you clear it or remove the extension.

Children

gnibs is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect their data.

Changes

We’ll update this page and the “Last updated” date when this policy changes. Material changes will be announced in-product or by email where appropriate.

Contact

Questions or requests: privacy@gnibs.com, or by mail: Loop Social Inc., 254 Chapman Rd, Ste 208 #1682, Newark, DE 19702, USA. See also our Terms of Use and Copyright Policy.