Your computer use is personal.

Scope

Panoptic is a Xaltris product for understanding patterns in computer use and supporting intentions a person chooses for themselves. It includes the Panoptic Windows application, Chrome extension, and hosted web service.

The Chrome extension works with the Panoptic desktop application. It is not an independent browsing-history service.

What Panoptic collects

Attention evidence

• The Windows application that owns keyboard focus, including its executable identity and, for ordinary applications, an optional window title.
• Whether the computer is awake and unlocked, at the desktop, locked, or unavailable.
• While a supported browser is in the foreground, the normalized hostname of its active tab, such as docs.example.com.
• Times, durations, device identity, synchronization state, and user-created intentions or reminder interactions needed to build an explainable timeline.

Account and product information

• Email address, account identifiers, sign-in records, connected-computer records, and pairing information.
• Rules, reminders, exclusions, privacy choices, and other settings you create.
• Information you submit through early-access, support, research, or feedback forms, including your name, contact details, setup, responses, consent choices, and campaign attribution where present.
• Limited technical and security records needed to operate, diagnose, and protect the service.

What the Chrome extension can see

Chrome makes the active tab URL available to the extension. The extension immediately reduces that URL to its hostname before reporting browser context to the Panoptic application on your computer.

Panoptic does not retain the URL scheme, username or password, port, path, query string, fragment, browser page title, or page content. The extension does not use content scripts and does not read what you type. It does not capture screenshots or keystrokes.

Private windows

Private-window site collection is off by default. Without both your explicit Panoptic choice and Chrome’s incognito permission, a focused private window is recorded only as the generic context private, with no hostname.

If you enable Sites in private windows and grant Chrome incognito access, Panoptic may retain the same reduced hostname used for ordinary browsing. It does not retain a private-mode marker beside that hostname. Turning either permission off stops further private-window hostname collection.

Extension permissions

• tabs: identify the active tab and reduce its URL to a hostname.
• nativeMessaging: exchange reduced browser context, settings, and rule events with the Panoptic application installed on the same computer.
• alarms: schedule local check-ins and reminder timing.
• notifications: show reminders you have configured.
• storage: keep extension state, privacy choices, and reminder state across browser events or restarts.

The extension does not download or execute remote code.

How data is used

Panoptic uses this information only to provide and improve its user-facing purpose: recording an explainable attention timeline, showing patterns and supporting evidence, synchronizing the user’s own devices, delivering user-created check-ins and reminders, providing account access and support, maintaining reliability, and protecting the service.

Panoptic does not sell personal data, use it for personalized advertising, provide it to data brokers, or use it to determine eligibility for credit, employment, insurance, or similar decisions. Panoptic does not impose productivity scores or infer what computer activity means to you.

Humans do not read your attention evidence except when you explicitly ask for support involving specific data, when necessary to investigate security or abuse, when required by law, or when data has been aggregated and anonymized for legitimate internal operations.

Storage and service providers

Panoptic stores evidence locally on your computer. If you connect the application to a Panoptic account, the desktop application synchronizes eligible evidence to the hosted service so you can view history and patterns on the web.

We use service providers only where necessary to operate Panoptic:

• Vercel for web hosting and delivery.
• Supabase for authentication and hosted data infrastructure.
• Resend for invitation, sign-in, and other transactional email.
• Google Chrome and the Chrome Web Store to distribute and operate the extension under the browser permissions you grant.

These providers process information on our behalf under their applicable terms and safeguards. We may also disclose information when required by law or when necessary to protect users, Panoptic, or the public from security threats, fraud, or abuse.

Retention and your controls

Local acknowledged attention evidence uses a rolling 90-day retention policy. Evidence waiting for synchronization is protected from automatic cleanup. Account and hosted information is retained while needed to provide Panoptic, meet operational or legal obligations, or until you use an available deletion control or ask us to handle a request.

• The desktop app can show local storage details, export a complete local snapshot, and delete cloud-acknowledged local attention history while preserving unsynchronized evidence and configuration.
• The web Settings action Delete cloud history permanently removes synchronized cloud attention evidence and intentions. This leaves local computer data, the account, and connected-computer relationships in place.
• You can disable private-window hostname collection, change Chrome’s incognito access, disable notifications, remove the extension, or disconnect Panoptic by uninstalling the desktop application.
• Cloud export, full account deletion, and one-step deletion across offline computers are not currently self-service features. Contact us for a privacy request.

Some limited records may remain where required for security, legal compliance, fraud prevention, or reliable completion of a deletion request.

Security

Panoptic uses access controls, scoped device credentials, secure hosted connections, and data minimization to protect information. The extension sends reduced browser context to the Panoptic native application on the same computer through Chrome’s native-messaging channel. Hosted synchronization uses encrypted network connections.

No system is perfectly secure. If you believe you have found a vulnerability or privacy issue, contact us promptly and avoid including sensitive attention evidence unless we ask for the specific material needed to investigate.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Panoptic limits extension data to its disclosed single purpose and related operation, security, reliability, and improvement. The restrictions described here apply to raw data and to data derived from it.

Questions and requests

Panoptic is operated by Xaltris Technologies. Contact us about privacy, access, correction, deletion, or security at:

Changes to this policy

We may update this policy as Panoptic changes. We will revise the date above and provide any additional notice required when data practices materially change.