Privacy Policy — Howpaper

Last updated: 1 October 2026. Howpaper ("the extension") is published by Malvatech (contact: [email protected]). This policy explains what data the extension handles.

What the extension stores

The guides you record: step texts, your notes, the address and title of the page of each step, the position of the clicked element, and the screenshots. Your settings (and, with Pro, your brand colour and logo), an anonymous random install identifier and, if you buy Pro, your licence key and the date it was last checked. All of it is stored in your browser's local extension storage (IndexedDB and chrome.storage.local).

What it never stores

The values you type in password fields, card-number fields and fields whose name or label suggests a secret are never read into a step: the step only says "Enter your password" (or "Enter your details"), and the area is pixelated in the screenshot before it is saved to an export. Recording only happens in the tab where you pressed Record, while the recording is on.

What leaves your computer

Nothing, with one exception: if you activate a Pro licence, the extension sends the licence key and the anonymous install identifier to our server (clip.malvatech.app, hosted on Cloudflare), which checks them with our payment provider and answers whether the key is valid. It never receives guides, screenshots, URLs or anything you recorded. We keep aggregate daily counters (number of licence checks) with no personal data. Cloudflare may log IP addresses for security for a short period under its own policy.

Exports

HTML, PDF, Word and Markdown exports are files written to your own computer. What you do with them afterwards is up to you.

Payments

Pro purchases are processed by Polar Software Inc. as merchant of record. Polar collects your email and payment details under its own privacy policy; we receive your email address and the licence key to provide support and refunds.

What we do not do

No analytics or tracking scripts. No advertising. No cloud copy of your guides. No selling or sharing of data with third parties beyond Polar (for payments). No remote code: all code ships inside the extension package.

Erasing your data

Deleting a guide removes it and its screenshots. Uninstalling the extension removes everything it stored.

Your rights

You can request access to or deletion of any data we hold about you (in practice: your purchase email and licence key) by writing to [email protected]. EU/EEA users have the rights set out in the GDPR, including the right to lodge a complaint with a supervisory authority.

Changes

We will update this page when the policy changes and note the date above.