Save to OffDuty — Browser Extension Privacy Policy

What the extension reads

When you click the extension icon, it reads the current tab's address (URL), its title, its social-preview meta tags (og:image, og:description, og:site_name), and the structured price and event details the page publishes for search engines — the same information a site publishes so it can be shared and found.

It also reads the first part of the page's visible text, up to about 20,000 characters, and only to look for a date and a time. That is what lets “Add to my calendar” open with the date already filled in when you are looking at a booking confirmation or a ticket. The text is examined in your own browser, is not sent anywhere, and is discarded the moment the popup closes. What can leave your browser is the date and time it found, and only if you press Create.

It reads all of this only at that moment, only from the tab you clicked on, and only because you clicked. It cannot read any other tab.

What it does not read

It does not read form fields, passwords, cookies belonging to the sites you visit, or anything on a page you did not click the icon on. It does not read past the first part of a page, and it does not keep any of the text it looked at.

What is stored

Two things are stored locally in your browser: your OffDuty sign-in token, and your last-used group or plan so you do not have to pick it again.

When you save a page, the page address, its title, its preview details, any note you typed, and the time you saved it are sent to OffDuty and stored in the plan you chose, visible to the members of that plan. You can delete a saved card from the OffDuty app at any time.

About the price

When a page publishes a price — the same structured data it gives to search engines — the extension fills it into the cost box so you do not have to retype it, and tells you it came from the page.

A listing price is often not what you actually paid: a “from” price, a per-person rate, a total before tax. You can change it, and nothing is recorded until you save it yourself.

Adding something to your own calendar

You can put an event straight on your OffDuty calendar instead of into a shared plan — useful when you are looking at a confirmation email or a ticket that is already yours.

Where the page says when it is, the date and time are filled in for you as a starting point, and the form tells you where the guess came from. Nothing is created until you press Create, and every field stays editable until then. We do not always get it right, which is exactly why you confirm it.

The event is saved to your own calendar, not to any group. Its page address is saved with it so you can get back to the booking. Like any appointment, it counts as busy — so your groups are not told you are free at a time you are not.

Your own schedule, shown back to you

The popup displays your OffDuty schedule for the day you are looking at — your shift, your appointments, and the hours left free — so you can check a day before booking it.

That information comes from your own OffDuty account over your signed-in session. It is displayed and then discarded when the popup closes. It is never written to the page you are on, and never sent anywhere else.

It does not track your browsing

No browsing history is collected, read, transmitted or stored. On the sites you visit, the extension is inactive until you click it — the single exception is our own sign-in page in the Firefox and Safari versions, described below. There are no analytics, trackers, advertising identifiers or third-party scripts in the extension.

It does not modify pages

The extension does not change, rewrite, restyle or inject anything into the websites you visit. It adds no links, no parameters and no markup to any page.

Addresses you save are stored exactly as they appear in your address bar. Nothing is added to them and nothing is removed.

Sharing

Saved pages are visible to the members of the plan you saved them to. Your data is not sold, and is not shared with anyone else except as needed to operate the service.

Signing in

Authentication uses the same account as the OffDuty mobile app, provided by Google Firebase Authentication. You sign in on our own web page — your credentials are never entered in the extension itself.

The Firefox and Safari versions ask for one more thing

Those two versions request access to rosterarchitect.com — our own website, and no other site. Chrome and Edge let our sign-in page hand your session to the extension directly; Firefox and Safari have no equivalent, so the extension needs permission for our own domain to receive it and to reach your OffDuty account.

Because of that, those versions run one small script automatically, on our own sign-in page only (rosterarchitect.com/extension/…). Its entire job is to pick up the sign-in that page hands over. It runs on no other page, on no other site, and reads nothing else.

Everything above still holds: the page you save is read only when you click the icon, only on the tab you are looking at, and no other website is read, changed or watched.

Deleting your data

Removing a saved card from a plan deletes it. Signing out of the extension clears the sign-in token and the stored preference from your browser. Deleting your OffDuty account removes everything associated with it — see the account deletion option in the app.

Contact

Questions about this policy: support@rosterarchitect.com