Inkbox Chrome extension security report

Inkbox puts the article you are reading on your Kindle. Click the toolbar button on any article and Inkbox extracts the readable text in your browser — no ads, no navigation, no cookie banners — and sends it to your Inkbox account, which converts it to an e-book and emails it to your Kindle. Right-click a link and choose "Send link to Kindle" to send something you have not opened yet, without leaving the page you are on. WHAT IT DOES • Toolbar button — captures the page you are on, including pages behind a login that a server-side fetcher could never reach, because the extraction happens in your own browser session. • Right-click a link — sends just that address. The page you are on is not read and you do not navigate away. • Duplicate-aware — sending the same page twice takes you to the copy you already have instead of making a second one. • Options page — set your Inkbox address and your API token, and test the connection before you rely on it. YOU NEED AN INKBOX ACCOUNT This extension is a companion to Inkbox and does nothing on its own. Create an account at https://inkbox.to, generate an API token under Settings, and paste it into the extension's options page. Self-hosters can point the extension at their own deployment from the same page. PRIVACY Inkbox sends data only when you click. There is no background collection, no analytics, no tracking and no third-party service of any kind. Your API token and your backend address are kept in the extension's local storage (chrome.storage.local) — never in Chrome's synced storage, so they are never replicated to Google's servers or to your other machines. Article content goes over HTTPS to the Inkbox backend you configured and nowhere else. Full policy: https://inkbox.to/privacy PERMISSIONS, BRIEFLY Inkbox asks for four permissions and one host. "activeTab" and "scripting" let it read the page only at the moment you click. "storage" holds your address and token locally. "contextMenus" adds the right-click item. The single host permission is the Inkbox backend itself — there is no all-sites access. LANGUAGES English, German, French and Spanish. The extension follows your Chrome interface language.