PRIVACY POLICY - STORYVAULT
Last Updated: October 2026
At StoryVault, we prioritize your privacy and are committed to complete transparency regarding our extension's operation. This Privacy Policy details how StoryVault works, what data is processed, how permissions are utilized, and our strict zero-tracking, zero-data-collection standard.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. CORE PRIVACY COMMITMENTS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
• Zero Personal Data Collection: StoryVault does NOT collect, log, store, or transmit your personal data, browser history, social media credentials, passwords, or personal identity.
• Zero Analytics or Tracking: There are no third-party tracking scripts, cookies, or telemetry analytics embedded in StoryVault.
• Zero Data Monetization: We do not sell, rent, or monetize your data under any circumstances.
• 100% Client-Side Processing: Every download, media extraction, and settings change happens exclusively on your local computer within your Chrome browser.
• No External Remote Servers: StoryVault does not communicate with any external backend servers. Media is downloaded directly between your browser and the public social media Content Delivery Networks (CDNs).
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. WHAT PERMISSIONS ARE REQUESTED & WHY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
StoryVault requests only the following specific permissions:
1. "downloads"
• Purpose: Enables the extension to save media files (photos, stories, reels, and videos) directly into your device's default Downloads folder when you click the download button.
• Usage: Only triggered when you explicitly request a file to be saved.
2. "storage"
• Purpose: Saves your local extension preferences (such as your preferred Mobile View window dimensions, anonymous story browsing toggle, and local download history list).
• Usage: Stored strictly inside your local browser using Chrome's local storage API (`chrome.storage.local`). This data never leaves your computer.
3. "contextMenus"
• Purpose: Adds convenient right-click options ("Save Media with StoryVault") when you right-click on an image, video, or link on supported social websites.
• Usage: Activates only upon user right-click.
4. Host Permissions ("*://*.instagram.com/*", "*://*.facebook.com/*", "*://*.cdninstagram.com/*", "*://*.fbcdn.net/*")
• Purpose: Grants the extension permission to inject the "Save Story" and "Download" buttons onto Instagram and Facebook web pages, and to fetch high-resolution media streams hosted on their official CDN servers.
• Usage: Restricted strictly to Instagram, Facebook, and their official media delivery networks. StoryVault CANNOT access any other websites you visit.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. ARE ALL THESE PERMISSIONS REALLY NEEDED? (PERMISSION AUDIT)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Yes, every declared permission is strictly essential for the single purpose of this extension. We have deliberately engineered StoryVault to eliminate redundant or high-risk permissions:
❌ NO `<all_urls>`:
Many competitors request `<all_urls>` (access to all websites you visit), which poses severe privacy and security risks and triggers long Chrome Web Store reviews. StoryVault strictly limits host permissions to Instagram, Facebook, and their media CDNs.
❌ NO `scripting` Permission:
We do not use dynamic arbitrary script injection. All scripts are declaratively loaded only on the required social media domains via Manifest V3 `content_scripts`.
❌ NO `clipboardWrite` Permission:
Modern web APIs (`navigator.clipboard`) handle standard clipboard pasting without needing broad browser-level clipboard write permissions.
❌ NO `tabs` or `webRequest` Permissions:
StoryVault does not inspect your tab history, browser tabs, or intercept network traffic.
Result: The remaining permissions (`downloads`, `storage`, `contextMenus`, and targeted social host permissions) represent the absolute minimal footprint possible for a media downloader and mobile viewer extension.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. THIRD-PARTY SERVICES & AFFILIATION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
StoryVault is an independent browser extension and is NOT affiliated with, sponsored by, or endorsed by Instagram, Facebook, or Meta Platforms, Inc. All trademarks belong to their respective owners.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. CONTACT & SUPPORT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
If you have questions about this Privacy Policy or wish to provide feedback, please contact the developer through the official Chrome Web Store support page or refer to the bundled help guide (`strona/index.html`).