RunJS — Privacy Policy
RunJS is local-first: your scripts and preferences stay in Chrome storage on this device. We do not operate a backend for your library, do not upload script bodies or page contents to our servers, and do not include analytics or ads.
Data we store
The following is stored only in Chrome storage on this device:
- Script library entries (name, URL, CSS/JS, run settings, optional cached icon)
- Language, theme, and font preferences
- Unsaved Console draft while you edit (session storage; cleared when the browser session ends)
- Short-lived inject jobs while a tab is opening (session storage)
- Short-lived inject result for the popup badge (local storage)
Data we do not collect
- No upload of your scripts, URLs, or page contents to RunJS servers
- No analytics SDKs, advertising trackers, or sale/sharing of personal data
- No broad browsing-history collection — tab URLs are checked only for tabs you opened through RunJS to decide when injection should run
- No remote script downloads — only code you saved locally is injected
Network use
- Opening or testing a target URL uses normal browser navigation to that site (not proxied through us)
- List icons are fetched from the target site's favicon only when site access is granted for that host; otherwise a built-in default icon is used
Import & export
- Export writes a plain JSON backup to a file you save — treat it like your library; it is not encrypted by default
- Import reads a JSON file you choose and merges it locally; nothing is sent to us
Permissions
- storage — save your library, preferences, and short-lived inject status on this device
- userScripts — run CSS/JS you authored (enable Allow User Scripts on this extension’s details page; Chrome 138+)
- tabs — open target URLs and inject on the matching tab
- webNavigation — detect page load, redirects, SPA navigation, and iframe frames for injection
- windows — use a hidden window when validating a target URL
- contextMenus — one toolbar-icon menu item that opens the public RunJS product page
- optional host access — requested when saving inject code or from Settings; also used to cache list icons from the target site
Scripts you write
Injected CSS/JS is provided by you, stored locally, and executed in Chrome’s user-script environment. You are responsible for what it does on sites you choose.
Contact
For privacy questions about this extension, email amals.chrome@gmail.com or use the Support / contact options on the RunJS Chrome Web Store listing.