PasteIt Privacy Policy

Effective Date: August 30, 2026 · Extension: PasteIt v1.1.0 · Developer: nabinkhanal00

1. Overview

PasteIt is a single-purpose Chrome extension that emulates keyboard typing to paste text into VM web consoles (VMware vSphere/ESXi, Proxmox, noVNC, etc.) where native clipboard paste is blocked by the remote console.

2. Data Collection and Use

We collect no user data. As defined by Chrome Web Store policy, "collection" means transmission off the device. PasteIt never transmits data off the device.

• Personally Identifiable Information: Not collected
• Health Information: Not collected
• Financial Information: Not collected
• Authentication Information: Not collected or transmitted. If you choose to type a password into a VM console, it may be saved in local history/snippets only if you use those features, and it never leaves your device. You can clear it anytime.
• Personal Communications: Not collected
• Location: Not collected
• Web History: Not collected. The extension does not track pages you visit.
• User Activity: Not collected. No click/mouse/keystroke logging beyond dispatching your explicitly provided text to the focused console.
• Website Content: Not collected. The content script only reads document.activeElement to find the console input target and dispatches synthetic keyboard events for text you explicitly submit via the popup or shortcut. No page content is stored or transmitted.

3. Local Storage Only

PasteIt uses chrome.storage.local solely on your device to provide core functionality:

• lastText - last typed text, for Ctrl+Shift+V / Command+Shift+V retype
• history - up to 50 recent entries, de-duplicated, you can clear via "Clear History"
• snippets - named snippets you save explicitly

This data never leaves your browser, is not synced, not sent to any server, and is not accessible to the developer.

4. Permissions Justification

• activeTab: To identify the active tab and send your text to its content script only when you click "Type Text" or press the shortcut.
• storage: To save history/snippets/lastText locally as described above.
• host_permissions <all_urls> + content_scripts <all_urls> (all_frames): VM consoles are self-hosted on arbitrary private IPs/domains (e.g., 192.168.x.x, 10.x.x.x, vcenter.company.local) that cannot be enumerated. The content script must run in any page/iframe to emulate keydown/keypress/keyup/input events for reliable typing. It only acts on explicit user action and only if the page has focus.

5. Remote Code

No remote code is used. All JavaScript (background.js, content.js, popup.js) is bundled in the extension package. No external scripts, no eval(), no remote Wasm, no code fetched at runtime.

6. Data Sharing

We do not sell, transfer, or share user data with third parties. We do not use data for purposes unrelated to the single purpose. We do not use data to determine creditworthiness or for lending purposes.

7. Data Retention and Control

Data is retained locally until you clear it: use "Clear History" in the History tab, delete individual snippets, or uninstall/clear extension storage. Uninstalling the extension removes all locally stored data.

8. Children's Privacy

PasteIt does not target children and does not knowingly collect data from children.

9. Changes

Any changes will be posted on this page with updated effective date and reflected in the Chrome Web Store listing.

10. Contact

GitHub: github.com/nabinkhanal00/pasteit
Issues: github.com/nabinkhanal00/pasteit/issues

If you believe this policy is inaccurate, please open a GitHub issue.