Privacy Policy for are.na rail

Last Updated: 23.09.2026

1. Overview

Are.na rail is a browser extension designed to integrate your browsing experience with your are.na account. This extension acts as a bridge between your browser and the are.na API.

Crucially, this extension does not have its own backend servers. We do not collect, store, or sell your personal data, browsing history, or authentication credentials on any independent database.

1. Data Collection and Usage

A. Authentication (OAuth2)

To use the extension, you must authorize it via the are.na OAuth2 flow.

• When you click "Authorize," you are redirected to are.na’s official authentication page.
• Upon your consent, the extension receives an access token from are.na. This token is used solely to make authorized requests to the are.na API on your behalf.
• The access token is stored locally within your browser's secure storage. It is never transmitted to any server other than are.na.

B. Page Title Queries

The extension can send the title of the webpage you are currently visiting to the are.na search endpoint. This occurs in two scenarios:

1. Manual Request: When you explicitly click the "get lines" button in the extension overlay.
2. "Subway" Navigation: When you navigate to a new website via a link provided by an are.na channel (the "subway" feature), the extension automatically queries the new page's title to maintain the connection to the are.na ecosystem.

Note: We only transmit the page title to are.na. We do not track your general browsing history or monitor websites you visit unless you trigger the functions described above.

1. Third-Party Services

This extension relies entirely on are.na. Any data sent to the are.na API (such as page titles or authentication tokens) is subject to the are.na Privacy Policy (https://www.are.na/privacy). We encourage you to review their policies to understand how they handle your data.


Because this extension does not maintain its own database:

• No Logs: We do not keep logs of the websites you search.
• No Profiles: We do not build user profiles.
• Revocation: You can revoke the extension's access to your account at any time through your are.na account developer settings (https://www.are.na/developers/oauth/authorized) or by uninstalling the extension.
• Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by the "Last Updated" date at the top of this page.

1. Contact

If you have any questions about this Privacy Policy, please contact https://github.com/larsilikum