NoteStack Privacy Policy

Last updated: May 2026

    The short version: NoteStack reads your Substack data using your existing browser session. All data is stored locally on your device. No data is ever sent to any external server. We have no server. We cannot see your data.
  

What data NoteStack accesses

Your Substack profile (name, username, profile photo)
Your Notes (body text, timestamps, like/restack/comment counts)
Your publication subscriber stats (if available via Substack's API)

Where your data goes

Nowhere. All data is stored exclusively in your browser's local IndexedDB storage under the database name NoteStackDB. You can inspect or delete this data at any time via Chrome DevTools → Application → IndexedDB.

NoteStack does not transmit any of your Substack data to any external server, cloud service, or third party.

Network requests

NoteStack makes one type of network request:

Substack API — NoteStack calls Substack's internal API (substack.com/api/v1/...) using your existing login session cookies. These requests are made from your browser directly to Substack's servers, exactly as if you were using the Substack website. No data is intercepted or stored by NoteStack.

No analytics or tracking

NoteStack does not use any analytics tools, crash reporters, or telemetry services. We collect zero usage data about how you use the extension.

Third-party services

Substack — NoteStack reads data from Substack using your session. Substack's own privacy policy applies to your account and data on their platform.

Children's privacy

NoteStack is not directed at children under 13 and does not knowingly collect any information from children.

Changes to this policy

If this policy changes materially, we will update the "Last updated" date above and note the change in the Chrome Web Store listing.

Contact

Questions about this privacy policy? Contact us via the feedback form in the NoteStack extension, or follow us at substack.com/@mdnotes1.