Your notes are yours.

Last updated: November 2, 2026

Ripply is a browser extension for highlighting text on web pages and adding notes to it. This policy says what Ripply stores, what leaves your device, and how to remove it.

Short version

Your highlights and notes stay in your browser unless you sign in. When you sign in, Ripply syncs them to your account, including the notes you made before signing in, so they appear on your other devices.
An account is optional. Ripply works fully without one.
Paid plans are handled by Razorpay, Paddle (via RevenueCat) and Apple. Ripply keeps only your plan status and the processor's subscription ID, never card, UPI or bank details.
No analytics, no tracking, no ads. Nothing is sold or shared for advertising.

Stored on your device

Ripply keeps the following in your browser's extension storage (chrome.storage.local):

The text you highlight, and the page address (URL) and title it came from.
Your notes and tags, and how each highlight and note looks and where it sits on the page.
Your collections and settings, such as default colour, note theme and light or dark sidebar.

If you don't sign in, none of this leaves your device. Ripply reads a page's text only to draw the highlights you made on it and to let you make new ones. It does not record which pages you visit.

Sent off your device, only if you sign in

Signing in is optional. If you sign in, the following is sent to Ripply's account service, run on Supabase in the United States (AWS us-east-1).

Your account:

Email sign-in: your email address. Supabase emails you a one-time code.
Google sign-in: your email address, name and profile picture link, as Google shares them. Google's own privacy policy covers the sign-in step.
An account ID and sign-in session created by Supabase. The session is kept in extension storage that web pages can't read.

When you're signed in, the sidebar shows your Google profile picture, which your browser loads from Google.

Sync. While you're signed in, Ripply stores your highlights, notes, collections and settings in your account: the highlighted text, your note and tags, the page address and title, how the note looks and where it sits, and, for notes on AI chat pages, the conversation's ID and title. Signing in uploads the notes already on this browser, so they join your account. Ripply also counts how many highlights and collections your account holds, to apply plan limits.

Notion (optional). If you connect Notion, Ripply's account service keeps an encrypted Notion access token and your workspace's name, and sends the highlights you choose to export to Notion, which creates pages in your workspace. Notion's privacy policy covers that data. Disconnecting Notion, or deleting your account, removes the token and asks Notion to revoke it.

On Firefox, Ripply asks for your permission before sign-in sends anything, including the synced page content and addresses. You can withdraw it in about:addons.

Payments, only if you buy a plan

Plus and Pro are optional paid plans. Checkout opens in a new tab on the payment processor's own site, which handles your payment details under its own privacy policy:

Razorpay for payments in India (UPI AutoPay and cards).
Paddle, as merchant of record, for payments outside India, connected to Ripply through RevenueCat.
Apple, for in-app purchases in the Ripply app for Safari, also through RevenueCat.

What Ripply stores about a plan: your user ID and email address, the subscription ID the processor assigned, the plan (Plus or Pro), its status and its renewal or expiry date. That is all it needs to unlock the plan in the extension. The processor receives your user ID, so it can tell Ripply which account paid, and your email address, for receipts and mandate notices.

What Ripply never sees: card numbers, UPI IDs, bank account details or billing addresses. They stay with Razorpay, Paddle or Apple.

Not collected

Ripply does not collect browsing history beyond the pages you highlight, analytics or usage data, crash reports, location, or card, UPI and bank details. It shows no ads and has no trackers.

Permissions

Runs on every page: to restore your highlights wherever you made them. Ripply reads a page only to draw them.
activeTab: to act on the page you are viewing when you use Ripply.
storage: to save your highlights, notes and settings on your device.
alarms: to sync in the background while you're signed in.
favicon (Chrome): to show site icons in your dashboard.
Optional site access: asked for only when you want Ripply on a page it can't reach by default, such as local files.

Sharing

Ripply never sells your data. It shares nothing with anyone except Supabase, which hosts the account service; Notion, only if you connect it; and Razorpay, RevenueCat, Paddle and Apple, only if you buy a plan, which receive what is listed under Payments.

Ripply's use of information follows the Chrome Web Store User Data Policy, including the Limited Use requirements. Your data is used only to provide highlighting, sync and export. It is never sold, never used for advertising or to determine creditworthiness, and never read by a person, except with your consent, for security, or where the law requires it.

Security

Data is sent over HTTPS. Each account can read and change only its own data; the database enforces this. Notion tokens are stored encrypted and never sent to your browser.

Keeping and deleting your data

On your device: delete highlights in the extension, or uninstall Ripply. Uninstalling removes everything Ripply stored in your browser.
Signing out removes the sign-in session from your browser. Your highlights stay on your device.
Synced notes: a note you delete is removed from your account within 30 days. A deletion marker is kept until then so your other devices learn about it.
Download your data: download everything in your account from the account page, and export highlights from the dashboard.
Your account: delete it from the account page. This cancels any active plan, deletes the subscription records Razorpay, RevenueCat and Paddle hold for you, and removes your account and everything synced to it straight away. The notes on that browser stay there. Copies may remain in Supabase's backups for a limited time before they are overwritten. An active Apple subscription has to be cancelled in your Apple ID settings first, because Apple does not let Ripply cancel it.

Children

Ripply is not directed at children under 13 and does not knowingly collect their data.

Changes to this policy

If what Ripply collects changes, this policy is updated before the change ships, and the date at the top changes.

Contact

Raj Rawat — [email protected] · github.com/rajrawat37. More ways to reach us, including our grievance officer, are on the contact page.