Haven extension 0.3.0 · Updated 14 October 2026
When you choose Save to Haven, the extension reads the specific link or post you selected, its title and an available thumbnail address. On supported webpages, a local helper observes your right-click target so it can identify the post rather than save the whole feed. This helper runs on HTTP and HTTPS pages; it does not automatically send page contents or your browsing history to Haven.
Links explicitly shared from your phone appear in the extension with their titles and timestamps. Pairing identifiers, a secret key, delivery receipts and connection/error state are also stored to keep transfers working.
The extension stores its queue, received links and pairing settings in your browser profile on this computer, not in Chrome Sync. It sends selected links only to the Haven phone you paired. Haven does not operate a cloud relay for this extension, and this extension has no advertising or analytics service. Data is not sold or used for advertising.
When you explicitly open a received link, that website receives a normal browser visit and its own privacy policy applies. The Android app may contact the original platform to retrieve metadata or display content; its separate privacy policy applies to that processing.
Extension 0.3.0 with Haven Android 1.0.166 or newer encrypts and authenticates transfer messages using AES-256-GCM with separate direction keys derived using HKDF-SHA256. The pairing QR shares a random secret directly between your devices. The local discovery name contains a separate public identifier, not that secret. Replayed transfer requests are rejected, and the extension does not fall back to plaintext transfers.
The encrypted messages travel over a local HTTP connection, not HTTPS/TLS. Network addresses, traffic timing, sizes and the public discovery identifier remain visible to the local network. Use trusted Wi-Fi. Keep the QR private: someone with it has the pairing secret. Disconnect and pair again if it is exposed. This is not a claim of anonymity, forward secrecy, encrypted storage at rest, or an independent security certification.
Webpage access identifies content selected with the context menu and shows transfer feedback. Active-tab and scripting permissions support your explicit save action on already-open tabs. Storage keeps queues and receipts; unlimited storage allows a growing offline queue beyond the normal extension quota, though disk failures can still prevent saving. Alarms retry pending transfers. Notifications show received-link confirmations. Local-network host access is requested for the particular phone discovery name or private IP you choose; your existing webpage-access permissions may already allow that origin.
Queue/history records and received links remain in this browser profile until its extension data is removed. Disconnect removes the current pairing; it does not erase saved-link history. Export queue makes a local JSON file of outgoing saves, not a backup of links received from your phone. Uninstalling the extension or clearing its profile data removes its local records and may permanently lose unsent links. Export first if needed. Files you export remain until you delete them yourself. Removing the extension does not delete saves already received by your phone.
Desktop and webpage notifications can display a shared link's title. You can turn off desktop notifications in your browser or system settings. Content access can be restricted in the browser's extension controls, which can limit saving from those pages.
Contact havenbygokul@gmail.com for support or privacy questions. If you email us, your message and contact details are handled to respond to that request. Do not include pairing QR codes or secrets. Changes to this extension's data practices will be reflected in this policy and disclosed as required.
The extension uses user data only to provide its stated link-saving and device-sharing features, in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements.