Tome Chrome extension security report

Tome turns the article you're reading into a properly typeset document and sends it to your Kindle. REQUIRES A TOME SERVER. Tome is self-hosted. This extension does nothing on its own — it talks to one server that you run yourself, or that a friend invited you to. There is no Tome company, no hosted service, and no signup here. If you don't have a server or an invite, this extension will not do anything for you. Set one up: https://github.com/patali/tome HOW IT WORKS Open an article, click the Tome button, and choose Send to Kindle or Open preview. The extension reads the article from the page you already have open — so anything you can read while signed in, it can convert. Your server renders it and emails it to your device. WHY IT LOOKS RIGHT Rendered through a real browser at your device's exact page size — 157 x 210 mm for a Kindle Scribe, 105 x 140 mm for a Paperwhite — with fonts embedded. Real margins, real hyphenation, images and code blocks intact. Not a reflowed HTML dump. Pick the reading face you prefer: Literata, Merriweather, Libre Baskerville, Source Serif, Inter, or Atkinson Hyperlegible, which is drawn for low vision. NOT JUST KINDLE The delivery address doesn't have to be a Kindle. Use any mailbox and the document arrives as a normal attachment, ready for a mail rule or a service like Zapier to take it further. PRIVACY Nothing in this extension reports on you. No analytics, no telemetry, no crash reporting, no tracking, no advertising SDK, no CDN. Fonts are bundled in the package rather than fetched from Google Fonts, so opening a preview doesn't tell a third party what you're reading. Nothing leaves your browser except to the server you configure, and only when you click a button. What the server keeps, and what it deliberately doesn't: Articles are never stored. They are rendered in a temporary directory, sent, and the directory is deleted. The server does record that a conversion happened — which account, when, the format, whether it worked, the file size, how long it took — so whoever runs it can see load and spot failures. It records no title, no URL and no domain, so the log shows that you converted something, never what you read. Those rows are deleted after 30 days. The date each account last used its key is also kept. That data sits on the server you or a friend runs. It does not go to the authors of Tome, because there is nowhere for it to go. Full policy: https://tome.pixelsyrup.com/privacy Open source, MIT: https://github.com/patali/tome