Privacy Policy
Last updated: October 16, 2026
Applies to: DrawOverlay version 0.2.0 and later
This Privacy Policy describes how DrawOverlay ("the Extension", "we", "our") handles information when you use the DrawOverlay Chrome browser extension.
By installing or using DrawOverlay, you agree to the terms described in this Privacy Policy.
──────────────────────────────────
1. OVERVIEW
──────────────────────────────────
DrawOverlay is a drawing and annotation tool that lets you draw, highlight, blur, add text and take screenshots directly on top of any webpage inside your browser. The Extension works entirely inside your own browser.
DrawOverlay does not send any information to any person, company or server, including us. It has no backend server, no account system and no analytics. Everything it saves stays on your own device.
──────────────────────────────────
2. INFORMATION STORED ON YOUR DEVICE
──────────────────────────────────
DrawOverlay does not collect personal data, and it never transmits anything off your device. To work properly, it saves the following information locally, using Chrome's built-in chrome.storage.local API:
a) Your preferences
Last selected drawing color (for example "#e11d48")
Stroke width and text size
Last tool you used (for example "pen")
Where you placed the minimized toolbar button on the screen
b) Your drawings, saved per page
The shapes you draw on a page (lines, arrows, rectangles, ellipses, highlights, spotlight and blur areas) and the text of any labels you type with the Text tool.
These are saved together with the address of the page you drew them on (the website address, path and query, without the "#" part), so they can reappear when you return to that page.
Drawings are only saved for pages where you actually drew something. Pages where you never use the drawing tools are not recorded.
This data is stored only in your browser's local extension storage on your device. It is not synced to your Google account or other devices, and it is never sent to us or to any third party.
──────────────────────────────────
3. HOW THIS INFORMATION IS USED
──────────────────────────────────
The information above is used only to make the Extension work for you:
Preferences: to restore your last color, width, text size, tool and button position the next time you open the overlay.
Drawings: to show your annotations again when you come back to the same page.
This data is never analyzed, aggregated, profiled, shared or used for any other purpose.
──────────────────────────────────
4. SCREENSHOTS
──────────────────────────────────
DrawOverlay includes a screenshot button. A screenshot is taken only when you click that button yourself. When you do:
Chrome captures the visible part of the current tab, including your drawings, using the chrome.tabs.captureVisibleTab API.
The image is saved to your computer as a PNG file through your browser's normal download, and copied to your clipboard so you can paste it.
The file name includes the website's host name and the date and time, for example "drawoverlay_example.com_2026-10-16_14-30-00.png".
Screenshots are never taken automatically, never uploaded, never stored inside the Extension and never sent to us or anyone else. What you do with the saved file is up to you.
──────────────────────────────────
5. INFORMATION WE DO NOT COLLECT
──────────────────────────────────
DrawOverlay does NOT collect, store or transmit:
Your name, email address or any contact information
Your location or IP address
Your browsing history (only the addresses of pages where you saved drawings are kept, locally, as described in Section 2)
The content of the webpages you visit
Form input, passwords or personal communications
Financial, health or authentication data
Usage analytics or activity logs. While the overlay is open, the Extension responds to your mouse and keyboard to draw and to provide keyboard shortcuts, but these actions are not recorded or logged.
Any data that could be used to identify you personally
──────────────────────────────────
6. DATA SHARING AND THIRD PARTIES
──────────────────────────────────
We do not sell, rent, trade, license or transfer any data to any third party.
DrawOverlay has no backend server, no analytics service, no advertising network and no cloud database. It makes no network requests of its own. No third-party trackers, SDKs or external scripts are loaded at runtime.
──────────────────────────────────
7. PERMISSIONS: WHY WE NEED THEM
──────────────────────────────────
DrawOverlay requests the following Chrome permissions. Each one is used only to provide the Extension's features:
activeTab
Used to show or hide the drawing overlay on the tab you are using when you click the Extension icon or press the keyboard shortcut. The tab's address is checked only on your device to confirm the overlay can run on that page.
scripting
Used as a fallback to add the overlay to a tab that was already open before the Extension was installed. Only the Extension's own bundled code is injected. No remote code is ever fetched or executed.
storage
Used to save your preferences and your per-page drawings in chrome.storage.local, on your device only (see Section 2).
Host permission: <all_urls>
Required so the overlay can work on any webpage you choose, including internal tools, documentation and localhost pages, not just a fixed list of sites. It is also what allows the screenshot button to capture the visible tab when you click it. The Extension's script is present on the pages you open but stays inactive until you open the overlay. It does not read, change or transmit the page's content.
──────────────────────────────────
8. YOUR CONTROL OVER STORED DATA
──────────────────────────────────
You can delete the data DrawOverlay stores at any time:
Delete drawings on one page:
Open the overlay on that page and click "Clear all" (the trash can icon). When a page has no drawings left, its saved entry is removed.
Delete everything:
Uninstall the Extension. Go to chrome://extensions, find DrawOverlay and click "Remove". This permanently deletes all of its stored preferences and drawings from your device.
Screenshot files you saved are normal files on your computer. Delete them like any other file.
──────────────────────────────────
9. REMOTE CODE
──────────────────────────────────
DrawOverlay does not use remote code of any kind.
All code that powers the Extension is bundled inside the Extension package at install time. No scripts are fetched from any URL, eval() is not used, and no WebAssembly modules are loaded from external sources.
──────────────────────────────────
10. CHILDREN'S PRIVACY
──────────────────────────────────
DrawOverlay does not knowingly collect any information from children under the age of 13, or under the age of 16 in the European Economic Area (EEA). The Extension does not collect personal data from anyone, regardless of age.
If you believe a child has used this Extension and you have concerns, please contact us using the details in Section 13.
──────────────────────────────────
11. SECURITY
──────────────────────────────────
Because DrawOverlay does not transmit any data, nothing it stores leaves your device. Your preferences and drawings are kept in Chrome's local extension storage, which is isolated from websites.
The Extension follows Chrome's Manifest V3 security model, which blocks remote code execution and enforces a strict Content Security Policy. Its interface runs inside an isolated Shadow DOM, separate from the pages you visit.
Note that anyone with access to your computer and your Chrome profile could open pages where you saved drawings and see them, just as they could see your other browser data.
──────────────────────────────────
12. CHANGES TO THIS PRIVACY POLICY
──────────────────────────────────
We may update this Privacy Policy from time to time to reflect changes in the Extension's features or in legal requirements. When we do, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of DrawOverlay after an update means you accept the revised policy.
──────────────────────────────────
13. CONTACT US
──────────────────────────────────
If you have any questions, concerns or requests about this Privacy Policy or the DrawOverlay Extension, please contact us:
Developer: Ravi Yadav
Website: raviyadav.me
We aim to respond to all inquiries within 5 business days.
──────────────────────────────────
14. GOVERNING LAW
──────────────────────────────────
This Privacy Policy is governed by the laws of India. By using DrawOverlay, you consent to the jurisdiction of the courts of India for any disputes relating to this policy.
──────────────────────────────────
© 2026 DrawOverlay. All rights reserved.