Soapstone Privacy Policy

Last updated: July 21, 2026

Soapstone is a browser extension that lets people leave short public notes ("inscriptions") on web pages, visible to other Soapstone users who visit the same page. This policy explains what information the service handles and what happens to it.

What we collect

• Account information: accounts are created and accessed exclusively through Google sign-in. When you sign in, Google provides us with your Google account's email address and its stable account identifier, nothing else. We never receive or store your Google password, your name, your photo, or your contacts. You then choose a Soapstone username, which we also store.
• Your inscriptions: the message you write, its type, the address (URL) of the page you inscribed it on, the snippet of text or image it is attached to, and any link you choose to embed in it.
• Your reactions: helpful votes and reports you submit on other people's inscriptions.
• Moderation records: when an inscription is reported by another user, we keep a copy of the reported message, the page it was on, and its author's username and email address so a human can review it. These records exist solely for moderation and are erased when the author's account is deleted.

How your email address is used

Your email address is used for exactly two things: identifying your account (one Soapstone account per Google account) and reviewing reported content. It is never displayed publicly, never used for marketing, and never sold, rented, or shared with anyone. Soapstone's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

What we do not collect

• Soapstone only communicates with our server on websites that appear on its server-provided allow-list. On every other website the extension is inactive and sends nothing anywhere, with one exception you trigger yourself: pressing the inscribe shortcut or the "Request this site" button on an unsupported page sends that page's address to us as a suggestion to support the site. The suggestion carries the page address and nothing else. It is not tied to your account, your identity, or anything about you, and nothing is ever sent automatically. On X (x.com), Truth Social, and Tumblr, the extension also sends the web addresses of posts that appear on your screen, solely to fetch any messages left on them.
• We do not collect your browsing history, and we do not track you across the web.
• We use no analytics, no advertising, and no third-party trackers.
• We do not sell, rent, or share your information with anyone.
• Like every web server, ours briefly processes IP addresses to limit abuse (rate limiting). They are held in short-lived server memory, not written to our database, and are not linked to your account.

What is public

Inscriptions are public by design: your username, your message, and its position on the page are visible to every Soapstone user who visits that page. Your living inscriptions are also gathered on a public page at /u/your-username, viewable by anyone. Votes and reports are anonymous to other users. Your email address is never shown to anyone, so your public presence is only as identifiable as the username you choose.

How long we keep things

• Inscriptions automatically and permanently delete after their lifetime: 4 days on X, Truth Social, and Tumblr, 7 days everywhere else. Their votes and reports are deleted with them.
• You can delete your own inscriptions at any time from the extension.
• Your account, including your email address and any moderation records, remains until you delete it yourself on the account deletion page, at which point the account and everything attached to it are permanently removed.

Where and how data is stored

Data is stored with established cloud hosting providers located in the United States. All communication between the extension and the server is encrypted (HTTPS). Your sign-in token is stored only in your own browser's extension storage, and signing out removes it. The list of users you choose to hide never leaves your browser.

Children

Soapstone is not directed at children under 13, and we do not collect information from them.

Changes

If this policy changes, the new version will be posted at this address with an updated date above.

Contact

Questions, account requests, or anything else: reach us through the contact form.