Extension privacy

Last updated: October 25, 2026.

Media Atlas LLC operates SwipeHarbor. This page covers the private ad and page-save extension. See the main privacy policy for account and website details.

Single purpose

The extension keeps the ads that you choose for your research: it saves web pages that you open to your private SwipeHarbor collection, and it downloads ad images and videos that you select to your own device. It contains all of its code. It loads no remote code.

Your explicit Save action

Save page sends the full current page URL, page title, rendered page text, and a full-page screenshot to your private account. The image and text can include other visible cards, personal details, and visible form entries. Check the page before you save.

When you save from a selected image, video, or link, Save also sends the details of that selection: its exact source URL, one link from the same card, and the text of that card. An original-file save stores the exact selected image or video bytes from a supported public Meta Ad Library source. It requires your data consent and access to that exact media origin. A page screenshot is a separate save intent. Video files must pass full-file validation. You can explicitly select multiple rendered files for an ordered batch save. Each file has its own save status. A partial batch does not mean that every file was saved.

Your explicit Download action

Download saves one image or video file that the page already shows to your own device, through Chrome's download manager. The extension reads the selected media address, which Chrome downloads. It reads the page address to apply the YouTube and Meta rules. To name the file, it reads the card text and the page's host name, site name, and channel or author labels in your browser. A page Download button also reads the media addresses and card text in frames of the same site that show on the page, because some sites place ads in such frames. It sends nothing about the download to SwipeHarbor: no file, no address, and no download record. The file goes from the site that serves it directly to your device.

Download works only for a plain image or video file. It does not bypass copy protection, streaming formats, sign-in walls, or paywalls. On Meta, it works only for creatives that the public Ad Library shows. YouTube Download is off. Local downloads need no account. The extension keeps a local count of the file names of the current day so that names do not repeat. It removes older counts when it next starts on a new day.

Text extraction excludes hidden text, scripts, and form-value properties. This exclusion does not remove visible form entries from the screenshot. The extension does not read page content to show its buttons. When you choose Save to SwipeHarbor on a selected item, the extension reads that item's card in your browser to identify the selected item. The popup can load the selected image or video from its original media host as a preview. The media host receives this browser request. No selected content goes to SwipeHarbor before you confirm Save.

Access and purpose

We store private imports for your research. Other customers cannot read them. The extension does not publish them to the ad library, send them to AI, or collect an automatic browsing history. The extension does not load PostHog, Google Analytics, or any other analytics script. It does not send a save event or a download event to an analytics service. We do not sell saved page data or use it for advertising.

SwipeHarbor website pages use optional analytics only after you allow them. Extension sign-in pages and your saved-pages page are website pages. The main privacy policy describes PostHog and Google Analytics for those pages. The extension does not send the saved page, the screenshot, or the downloaded file to those analytics services. You can turn website analytics off. That choice does not change this extension.

The extension uses temporary access to one tab after you select its toolbar icon, its Save to SwipeHarbor menu item, or its Download with SwipeHarbor menu item. For a download, the extension reads the selected media address, its card text, and the page's host name, site name, and channel or author labels. Chrome downloads the media address. The page address also decides if the YouTube and Meta rules allow the download. The other values only name the file. All of these values stay on your device. Optional site access adds page buttons on named ad sites. A fresh tab can require the toolbar action before a page button can capture it.

Hover save is optional. You turn it on for one site at a time, for at most 32 sites. Chrome then grants access to that site. The extension stores only the list of sites that you turned on, not the pages that you visit. Remove site access in the extension or in Chrome at any time.

Features that are not active

Video transcripts, hook extraction, AI analysis, and library matching are not available for private saves. These features send no request and use no quota.

Account and local storage

A verified free account is required. Private saves do not grant paid library access. The extension receives an account label and a short-lived private-import token. It does not receive your password, session cookie, Google token, or payment details.

Chrome session storage holds that token for at most 30 minutes. It also holds one pending save choice (the tab, exact page URL, and selection) and one pending download choice (the tab, page URL, and media address) until the requested action completes. One encrypted pending capture can remain locally for up to 15 minutes. A browser restart removes the token and the capture decryption key. Local file removal occurs when Chrome next runs.

Chrome local storage for this extension also holds a continuation secret for this installation. The server stores only a hash of that secret. It does not store the secret. That secret is not a password and it cannot save a page or read your library by itself. The extension uses it to obtain a new 30-minute token only while the website session that approved pairing is still active and the email is verified. Each renewal replaces the secret. The previous secret can renew once when that response is lost. The first successful use of the new access token retires the previous secret. Use of a retired secret revokes the connection. Until that first use, the previous secret can still renew once. Disconnect, revoke, website logout, or the end of that website session stops renewal. An offline disconnect clears this browser. The server credential can remain until a later revoke succeeds or that website session ends.

Local storage also keeps the latest save operation and its status. This can include the page URL, the selected image URL, and the advertiser label for the popup preview. The next save replaces this record. The latest selected-file batch also keeps its source addresses, card text, ordered operation keys and account identity for status recovery. A new batch replaces that record. Remove the extension to clear its local storage.

Service providers

The app uses its hosting infrastructure, Neon for database storage, and Cloudflare R2 for private images. Existing account providers handle sign-in as described in the main policy. The extension sends saved content only to SwipeHarbor.

Retention and deletion

Saved items remain until you delete them or delete your account, within the service limits. Delete removes access immediately. Physical file deletion can remain pending while an upload outcome is unknown or a provider is unavailable.

After outstanding writes settle and the cleanup service works, the cleanup target is 24 hours. An unresolved write has no fixed deletion deadline. Minimal deletion and operation receipts contain no page content and remain for 30 days. Contact support for account data requests and current backup details.

Limited Use

The use of information received through Chrome APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Saved content supports the stated private-save function.

Use the main privacy policy for contact details. Open your saved pages to view, export, or delete an import.