NoteStack Privacy Policy
Last updated: May 2026
The short version: NoteStack reads your Substack data using your existing browser session. All data is stored locally on your device. No data is ever sent to any external server. We have no server. We cannot see your data.
What data NoteStack accesses
- Your Substack profile (name, username, profile photo)
- Your Notes (body text, timestamps, like/restack/comment counts)
- Your publication subscriber stats (if available via Substack's API)
Where your data goes
Nowhere. All data is stored exclusively in your browser's local IndexedDB storage under the database name NoteStackDB. You can inspect or delete this data at any time via Chrome DevTools → Application → IndexedDB.
NoteStack does not transmit any of your Substack data to any external server, cloud service, or third party.
Network requests
NoteStack makes one type of network request:
- Substack API— NoteStack calls Substack's internal API (
substack.com/api/v1/...) using your existing login session cookies. These requests are made from your browser directly to Substack's servers, exactly as if you were using the Substack website. No data is intercepted or stored by NoteStack.
No analytics or tracking
NoteStack does not use any analytics tools, crash reporters, or telemetry services. We collect zero usage data about how you use the extension.
Third-party services
- Substack— NoteStack reads data from Substack using your session. Substack's own privacy policy applies to your account and data on their platform.
Children's privacy
NoteStack is not directed at children under 13 and does not knowingly collect any information from children.
Changes to this policy
If this policy changes materially, we will update the “Last updated” date above and note the change in the Chrome Web Store listing.
Contact
Questions about this privacy policy? Contact us at stacktreelabs@gmail.com.