Privacy Policy
Last updated: July 19, 2026
1. Scope
This policy applies to the My Lists extension, my-lists.mahashe.org, the web version at mahashe.org and related server features.
2. Data processed
My Lists processes only data required for the new-tab experience and features selected by the user:
- tabs, groups, bookmark names and URLs, icons and item order;
- wallpapers, gradients, clock, language, search provider and interface settings;
- backups, state-history snapshots and shared collections;
- when the user signs in to Mahashe ID: name, email address, avatar, provider identifier and session data;
- when cloud sync is enabled: My Lists state, revisions, timestamps and technical session information;
- when weather is enabled: a selected city or coordinates sent to Open-Meteo;
- technical server logs such as IP address, User-Agent, time, response code and diagnostics.
3. Purposes
Data is used for storage, synchronization, recovery, shared collections, account security, troubleshooting and support. It is not used for personalized advertising, credit scoring or sale to third parties.
4. Authentication
Google or Yandex sign-in is optional. My Lists never receives the user's Google or Yandex password.
5. Search and external links
Search queries are sent directly to the selected search provider. Mahashe does not build a separate profile from search-query content.
6. Payments
Voluntary support payments are processed by YooKassa. My Lists does not receive full card details. Transaction ID, amount, status and operational metadata may be retained.
7. Third parties
Data is shared only with providers required for a selected feature: Google or Yandex, Open-Meteo, YooKassa, the selected search engine and hosting providers.
8. Storage and security
Local data remains in the browser. Cloud state is transferred over HTTPS and stored on Mahashe infrastructure with access controls, backups and encryption for sensitive stores.
9. Retention
Local data remains until cleared or the extension is removed. Cloud data remains while the account and sync are used, or until deletion is requested. Technical logs are retained for a limited security and diagnostic period.
10. User rights and deletion
Users may export data, clear local state, disable sync and request server-side deletion through Delete data or by email.
11. Limited Use
Data is used only to provide and improve the My Lists features disclosed on this website and in the Chrome Web Store. It is not used for advertising, unrelated profiling, lending or credit decisions.