Privacy Policy & Terms
Last updated: 2026-06-29
Privacy Policy
Notion Flow (the "Extension") is a free browser extension developed by Xheldon that publishes the content you write in Notion to your own GitHub repository. Its core design principle is that your data always stays under your control: it is a purely client-side, non-intrusive tool, and the author operates no server that receives your data.
In short:
- The author does not collect, store, or transmit any of your data. The Extension contains no analytics, tracking, crash reporting, or telemetry code.
- Your tokens, keys, and settings are stored only in your browser's extension storage, and are never sent to us.
- The Extension talks directly, from your browser and only when you act, to the services you configure (Notion, GitHub, your object storage) using the credentials you provide.
What we collect
Nothing. The Extension includes no analytics, statistics, crash-reporting, or telemetry code. It does not collect your IP address, device information, usage logs, or any personally identifiable information, and there is no server on our side to receive such information. The documentation site notion-flow.xheldon.com only hosts help and documentation pages that you open in your browser when you click a link; the Extension never sends any data to that domain.
Data storage
To function, the Extension stores the following locally: your Notion integration token, your GitHub token, the access keys for your object storage (Tencent COS / Aliyun OSS / AWS S3 / Cloudflare R2, etc.), and your publishing and interface settings.
This data is saved through the browser's extension storage API (chrome.storage.sync). It stays within your browser; if you have browser account sync enabled (e.g. Chrome / Edge sync), your browser vendor synchronizes it across your signed-in devices. In either case it is never sent to the author. You can clear this data at any time from the Extension's settings page, or uninstall the Extension to remove all local data.
How data flows (third-party services)
When you use the publishing feature, the Extension uses the credentials you provide to communicate directly from your browser with the services below — never through any server operated by the author:
- Notion API (
api.notion.com): reads the content and properties of the page you choose to publish. - GitHub API (
api.github.com): commits the generated Markdown to the repository you specify. - Your configured object storage / CDN (Tencent COS, Aliyun OSS, AWS S3, Cloudflare R2, or any S3-compatible self-hosted service): re-hosts the images and videos in your page.
These are third-party services that you choose and connect with your own accounts and keys. The relevant data goes directly from your browser to them; each service's own privacy policy applies, and the author can neither access nor is responsible for their processing.
Optional AIGC feature
AIGC is an optional feature, disabled by default and still under development. If you choose to enable it, you provide your own OpenAI (or compatible) API key; the relevant text is sent directly to that AI service using your key, governed by its privacy policy. The author is not involved and receives none of that data.
Permissions and their purpose
- Host (website) access: to read the outline on Notion pages and to reach the Notion, GitHub, and your configured object-storage endpoints directly.
- Notifications: to show local notifications about publishing progress and results.
- Storage: to save the settings and credentials described above.
The Extension does not read or modify your data on sites unrelated to these functions.
Children's privacy
The Extension is not directed to children under the age of 13, and does not knowingly collect personal information from any child (indeed, it collects no personal information from anyone).
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and reflected in the "Last updated" date at the top. You are advised to review this page periodically.
Contact us
If you have any questions or suggestions about this Privacy Policy, contact the author at c1006044256@gmail.com or via GitHub Discussions.
Terms & Conditions
By downloading or using the Extension, you agree to the following terms. Please read them carefully before use.
- The Extension is provided free of charge and "as is", without warranties of any kind, whether express or implied. To the maximum extent permitted by applicable law, the author is not liable for any direct or indirect loss arising from your use of, or inability to use, the Extension.
- You are responsible for keeping your own credentials safe — your Notion token, GitHub token, and object-storage keys — and are advised to grant only the minimum scope needed to publish. You are responsible for the credentials you configure and for the actions they enable (such as writing content to your repository or storage).
- The Extension has no affiliation with or endorsement by Notion, GitHub, or any object-storage provider. Your use of those services is also subject to their respective terms.
- The name, code, and related intellectual property of the Extension belong to the author. Do not use the Extension for any unlawful purpose.
- The author may update, change, or discontinue the Extension (and its features) at any time without prior notice.
- We may update these Terms from time to time; updates will be posted on this page. Continued use of the Extension means you accept the updated Terms.
Contact us
If you have any questions or suggestions about these Terms, contact the author at c1006044256@gmail.com.