Xenmark/Extension privacy

Extension privacy.

Effective date: September 2, 2026

Available for Google Chrome and Microsoft Edge

Xenmark – Drawing Review Notifications is a browser extension by Xenmark AS that shows your Xenmark drawing-review notifications in your browser. This policy covers the extension only; the Xenmark service itself is governed by the Xenmark privacy policy. Changes to this policy are posted at this URL with an updated effective date.

1. What the extension stores

All of the following lives in your browser's local extension storage (chrome.storage.local) and nowhere else:

  • A pairing token, created when you connect the extension using a code generated inside Xenmark. It grants read-only access to your own notifications. Your Xenmark password is never entered into, seen by, or stored in the extension.
  • A notification cursor — a bookmark marking the newest notification already fetched.
  • A local copy of your most recent notifications (up to 20) so the popup can show them: commenter display name, project name, drawing number, revision, comment title/preview, timestamps, and a link into Xenmark.
  • Your theme preference (light or dark).

2. What the extension transmits

The extension communicates with exactly one server: https://api.xenmark.app, Xenmark's official integration API. It sends your pairing token there (as an authorization header) to fetch your notifications, once per minute. Nothing is sent anywhere else. The extension contains no analytics, no tracking, no advertising, and no third-party services of any kind.

3. What the extension never accesses

Your browsing history, the content of web pages you visit, other tabs, passwords, email, or files. Its host access is limited to api.xenmark.app by the extension manifest, enforced by the browser.

4. Sharing

Your data is not sold, not shared with third parties, and not used for any purpose other than showing you your own Xenmark notifications.

5. Removing your data

  • Sign out of this browser (in the extension popup) deletes the token and all locally stored data.
  • Revoking the connection in Xenmark (Account & Security → Connected apps) permanently disables the token; the extension then deletes its local data automatically.
  • Uninstalling the extension removes all of its local storage.

6. Contact

Xenmark AS — via the contact details published at xenmark.app/contact.