Hosted at
https://getdailo.xyz/privacy. The Chrome Web Store requires a privacy-policy URL. This policy reflects how Dailo actually works today: local-first, no Dailo servers, no tracking in the extension, no ads. The website counts anonymous page views, described under The website below. We will update this policy (and the effective date above) before shipping any sync or accounts.
Summary
Dailo is local-first. Your bookmarks, tabs, Spaces, tasks, and settings live on your own device in the browser's local storage (IndexedDB). The extension runs no servers of its own, performs no analytics, serves no ads, and does not sell or share your data. We have no account for you and no database of your activity. There is nothing on our side to see.
A small number of features make a direct connection from your browser to a third party when you use them (weather, and fetching a saved link's title/icon). Those are described under Network connections below. Even then, the data goes straight from your device to that service, never through Dailo.
What Dailo stores (on your device only)
- Links/bookmarks you save (URL, title, your tags/notes, favicon).
- Spaces (a saved set of tabs + tasks) and the snapshot needed to restore them.
- Tasks, focus-session settings, and your preferences (theme, folders, focus blocklist, and, if you set one, your weather city).
All of this is kept locally. You can export everything at any time (JSON or the standard bookmarks HTML format) and delete it by removing the extension or clearing the extension's storage.
Network connections
Dailo has no backend. Every connection below goes straight from your browser to the site or service involved; none of them touch a Dailo server:
- Weather (optional). If you add a city to the new-tab weather widget, Dailo asks the free Open-Meteo API for that city's coordinates and current conditions. This sends the city name and its approximate coordinates to Open-Meteo. Dailo does not use your device's precise location (the browser geolocation permission is never requested). Weather only works from a city you type in, and only if you add one.
- Saving a link. When you manually save a URL, Dailo fetches that page once to read its title and favicon so the saved card looks right. This is a normal request to the site you're saving (that site sees your IP address, as it would on any visit). It happens only for links you choose to save; Dailo does not crawl, prefetch, or read anything else on the page.
- Showing site icons. Cards for saved links and Spaces, and the site picker in the setup screen, display each site's icon by loading it from the site's own icon URL, the same way a webpage loads an image. The site hosting an icon can see your IP address when the icon loads; your browser caches icons, so this doesn't repeat on every view. Favicons for the open-tab list come from the browser itself with no extra request. No other information is sent.
That's the complete list of outbound connections in the current version.
Browser permissions and why Dailo needs them
- Tabs: to read the current tab and your open tabs so you can save, group, restore, and de-duplicate them, and to mute a tab while it is blocked during a focus session. Dailo does not transmit your tab list anywhere.
- Storage / unlimited storage: to save your data locally and avoid eviction.
- Tab groups, side panel: to recreate native tab groups when restoring a Space, and to show the Dial where the on-page overlay can't appear.
- Alarms: to run the Pomodoro timer and resurface snoozed links even when the background worker is idle.
- Context menus: the right-click "Save to Dailo".
- Notifications: to tell you when a focus session ends.
- Scripting: to load Dailo's own overlay script into tabs that were already open when Dailo installs or updates, so the Dial and focus blocking work there without reloading. It injects only Dailo's bundled code and reads nothing back from the page.
- Access to all websites (
<all_urls>host permission + content script): the all-sites content script shows the Dial overlay on the page you're viewing when you open it, and, during a focus session, covers sites on your blocklist with a full-page "blocked" screen (those tabs are also muted while covered; blocking happens entirely on your device). The host permission lets Dailo fetch a URL you save, once, to read its title and favicon (the "Saving a link" connection above). Dailo does not read page content and transmits nothing to us. - Bookmarks (optional): never requested at install. The browser asks for it only if you choose "Import from this browser" during setup, and Dailo uses it to read your bookmarks for a one-way import into its own local library. Your native bookmarks are not changed. If you decline, the bookmarks-HTML file import still works.
The website (getdailo.xyz)
The extension and the website are separate things. The website counts anonymous page views through Vercel Web Analytics, which is how we tell which pages people actually reach. It sets no cookies, keeps nothing on your device, and builds no profile that follows you between sites or between visits. It runs on the website only: the extension does not load it, and nothing about your bookmarks, tabs, or browsing goes anywhere near it.
What Dailo does NOT do
- No accounts, no Dailo servers, no cloud storage (in the current version).
- No analytics, telemetry, ads, or third-party trackers in the extension. (The website counts anonymous page views; see The website above.)
- No selling, renting, or sharing of personal data.
- No reading or transmitting your page content or browsing history.
- No use of your device's precise geolocation.
Optional sync (when enabled in a future version)
If you opt in to cross-device sync, Dailo uses end-to-end encryption: your data is encrypted on your device with a key derived from your passphrase before it is sent to the sync relay. The relay stores only ciphertext and never has your key, so it cannot read your data. Sync is off by default and entirely optional. This policy will be updated with relay details before sync ships.
Data retention & deletion
Because your data lives only on your device, you are always in control of it. Remove it at any time by clearing the extension's storage or uninstalling Dailo. Uninstalling deletes Dailo's local data along with the extension.
Children
Dailo is a general-purpose productivity tool and is not directed to children under 13.
Changes
We'll update this policy as Dailo evolves (for example, when sync ships) and revise the effective date above. Material changes will be reflected here before the affected feature is enabled.
Contact
Questions about privacy? Email hello@getdailo.xyz. For product help or to report a problem, support@getdailo.xyz.