Privacy Policy

YourDynamicDashboard Extension

Last Updated: September 1, 2026

Introduction

We believe your browser's new tab page should be personal, private, and yours. YourDynamicDashboard is built with a "Privacy First" architecture. This document outlines exactly how we handle your data.

The Short Version: YourDynamicDashboard does not sell personal data, create advertising profiles, or include YDD behavioral analytics. Most dashboard data, including search history and location preferences, stays in your browser. Search suggestions default to History Only, which makes no autocomplete network requests. If you explicitly enable an online mode, the text currently being typed and ordinary network metadata are processed by the selected suggestion relay and its provider as described below.

Where is my data?

All your customizations and data are stored locally in your browser using localStorage and IndexedDB. YDD does not provide an account or automatically upload this local data to a YDD database. Optional online features make limited network requests that are explained in this policy.

What is stored locally?

Theme colors, saved presets, personal greeting name, to-do lists, custom shortcut links, custom shortcut icons, background images, keyboard settings, and general preferences.

๐Ÿ” Search History

Your submitted search queries are stored locally on your device to provide the Quick Search History feature. They are never uploaded to a YDD account or suggestion database. When you submit a search, the query is sent to your selected search provider so that provider can return results. A suggestion is added to local history only if you select or submit it as a search. Search history can be paused, cleared, or configured to auto-delete after 30, 90, 180, or 365 days.

๐Ÿ’พ Suggestion Cache

In online modes, YDD locally caches the typed prefix, returned suggestions, relay address, and exact creation and expiry timestamps. Each entry expires after 24 hours and is deleted at expiry while YDD is running or the next time it loads. This cache is not included in YDD backup files.

๐Ÿ“ฆ Backups

A backup file is created only when you request one. It may contain local settings, search history, the selected suggestion mode, remembered consent, and a saved custom relay URL. Online suggestion cache entries are excluded. You control where the downloaded backup file is stored or shared.

Search Suggestions

Search suggestions combine local history with optional online autocomplete:

History Only

Default and local. Uses only submitted searches saved in your browser. Nothing typed is sent online.

History + Online

After consent, the current typed prefix goes through YDD's Cloudflare relay to DuckDuckGo. Local history remains first.

History + Custom

Sends prefixes to the HTTPS relay you provide. That relay's operator controls its provider, logging, and retention.

Online data flow

Requests begin after two characters, use HTTPS, and contain only the current prefix (maximum 256 characters). YDD does not attach history, location, account details, or cookies. The browser may cache results locally for 24 hours; the built-in relay may cache responses at Cloudflare for up to five minutes. Normal network metadata can still be processed by relay and provider services.

Custom relay validation

On save, YDD tests the relay with test, hello, and today, stopping after the first valid response. If all fail, YDD restores History Only. The URL is stored locally and preserved when another mode is selected.

Online modes require consent. Selecting Remember choice saves consent locally. Choose History Only to stop online requests; clearing extension data also removes local history, preferences, and suggestion cache data.

News Feeds

Optional and disabled by default. When you enable News Feeds, YDD connects directly from your browser to only the publishers you select: BBC News, CNN, DW, Euronews, The Guardian, and/or NPR. For the selected providers other than CNN, YDD reads their published RSS/RDF feeds; CNN is read through its publisher-operated news API. Your browser asks for optional host access to the selected publisher hosts and controls whether that access is granted.

News requests retrieve only the information needed to display the cards, including headlines, story links, publisher names, publication times, and available image URLs. Feed and API requests omit credentials and referrer data. YDD does not send your search history, typed search text, location, account details, or a browsing profile with News requests.

The retrieved story metadata, selected image URLs, and limited refresh status are stored in the extension's local news cache and are not uploaded to a YDD server. Images load directly from publisher servers when displayed, and story links open the publisher's site. Publishers and network providers may receive ordinary delivery metadata, such as an IP address, and apply their own privacy policies. Disabling News or deselecting a provider asks the browser to remove the corresponding optional host access.

Permissions & Usage

๐ŸŽ™๏ธ Microphone (Voice Search)

Optional. Used only when you click the microphone icon or press 'V'. We use your browser's native Web Speech API. Audio is processed by your browser vendor (e.g., Google for Chrome) to convert speech to text. We do not record or store your voice. Depending on browser support, processing may happen locally or through the browser vendor's speech service; YDD does not force or control that choice.

๐Ÿ“ Geolocation

Strictly Opt-In. This extension does not track your location in the background. If you manually click "Detect Location", YDD asks for confirmation before reading your coordinates. YDD declares geolocation as an extension permission because browsers require it for location access from extension pages. YDD only requests your current position after you click a location button and confirm the privacy notice. If allowed, your coordinates are sent directly to the weather providers and saved locally. We do not store or monitor this data on a YDD server.

๐ŸŒ Online Search Suggestions

Strictly Opt-In. History Only is the default. History + Online uses YDD's restricted Cloudflare relay and DuckDuckGo; History + Custom uses the HTTPS relay entered by the user. The extension does not request a broad browser host permission for this feature. See โ€œSearch Suggestionsโ€ above for the exact transmission and retention details.

๐Ÿ“ Storage

Used to save your preferences so they persist every time you open a new tab.

External Services (APIs)

To provide dynamic features, the extension communicates with the following third-party services. Any network request can expose standard delivery metadata, including an IP address, to the service receiving the connection and intervening infrastructure. Each provider processes data under its own terms and privacy policy.

Open-Meteo

Used to fetch weather data. Open-Meteo is a privacy-focused, open-source weather API.

open-meteo.com/en/pricing

BigDataCloud

Used for "Reverse Geocoding" (converting raw GPS coordinates into a readable City Name) only when the auto-detect location feature is used.

Cloudflare / YDD Suggestion Relay

Hosts the built-in autocomplete relay. Cloudflare processes the typed prefix and normal network/security metadata while routing the request. Worker observability is disabled, but Cloudflare may process Network Data and short-lived cached responses under its own policy.

cloudflare.com/policies/privacy

DuckDuckGo Autocomplete

Supplies autocomplete results to the built-in YDD relay only after online suggestions are enabled. DuckDuckGo receives the typed prefix from the relay. DuckDuckGo states that it does not save or share individual search histories and does not save IP addresses alongside searches; its current policy controls its handling of these requests.

duckduckgo.com/privacy

Custom Suggestion Relays

If History + Custom is selected, the browser connects to the user-provided HTTPS endpoint. That endpoint receives validation prefixes, live typed prefixes, and ordinary network metadata. YDD does not control the endpoint's provider, logging, security, retention, or onward sharing. Its operator's privacy policy applies.

Google Favicons

Used to fetch shortcut icons, including the built-in shortcuts and custom websites added to your Shortcuts bar.

Google Fonts

The selected dashboard font is loaded on demand from Google's font delivery service. Lexend mode also loads Inter for the clock and temperature display to preserve the original styling.

Picsum.photos

Used to fetch random, high-quality background images if you explicitly enable the "Random BG" feature in settings.

Open Source Transparency

We believe in "Trust, but Verify". The entire source code for YourDynamicDashboard is available publicly.

You can audit the code yourself on GitHub:
github.com/xtditom/YourDynamicDashboard