Privacy Policy

The Superpower Daily New Tab browser extension replaces your new tab page with customizable news, games, tools, media, events, tasks, and focus sessions. You can use its main features without an account. This section describes the extension's data practices. If you open our website from the extension, the website practices described elsewhere in this policy also apply.

Local information. The extension stores your layout, component choices, language, background and appearance settings, search-provider choice, custom website links, local saved stories, tasks, daily priority, focus-session state, and recently swiped story decisions in your browser's storage. A photo you select as your background stays on this device and is not uploaded to Superpower Daily. Layouts, website links, photos, and focus-session timers do not sync to your Superpower Daily account. The extension does not synchronize these records through Chrome's browser-sync service.

Read later page capture. When you choose Save page or Save link from the right-click menu, use the extension toolbar icon, or invoke its save shortcut, activeTab temporarily exposes the selected tab's URL, title and site icon. The contextMenus permission adds these explicit save commands. We do not continuously read other tabs or collect general browsing history. The chosen URL, title, description, preview image URL, site icon URL, site name and save time are stored in this browser's local reading list. Captured pages are not uploaded or synchronized to your Superpower Daily account. To enrich a saved link, the extension may make one bounded request to that destination for Open Graph, Twitter Card, HTML-title or structured metadata. It does not inject code, execute the destination HTML, send website cookies or account credentials, or send the saved URL to our backend or a metadata service. The destination and preview-image hosts can receive your IP address during normal requests. Pages that block metadata requests still save with the available tab title or domain. Private-browsing pages and internal browser pages are not saved. Removing a saved item deletes that local record.

Uninstall feedback. Chrome may open an optional feedback page after you remove the extension. Its query string contains only the extension version and last interface language. When product analytics is active, its URL fragment additionally carries a dedicated opaque uninstall receipt. This is not an account credential and cannot sign in or access account data. Fragments are not sent in HTTP URLs; the page removes the fragment and submits the receipt separately without website cookies to record a best-effort uninstall signal. Feedback answers are sent only when you submit the survey. We privately store selected reasons, optional usage duration/comments, interface language, extension version, and submission date. A valid analytics receipt can associate feedback with its installation; the form otherwise does not identify an installation or signed-in website account. An email is collected only if you ask for a reply, and neither feedback nor analytics creates an account or subscribes you to newsletters. A random response ID prevents duplicate submissions during retries. Administrators can review feedback for product improvement and requested replies; contact us to request removal.

Product analytics. Reporting is enabled by default for new and existing installations in updated extension builds. Earlier builds may require opt-in or keep reporting disabled. The extension creates a random identifier and separate limited credentials for each installation in local browser storage, outside settings imports, exports and resets. It sends first-party lifecycle reports: a fresh-install or existing-installation classification, client install/first-open times when known, setup completion or skipping, extension version changes, once-per-UTC-day foreground activity, selected layout/component/background category and appearance preferences, browser major version, operating-system family, interface language, time zone, initial render duration, and coarse error/focus/sound-start signals. Podcast playback uses a separate random local analytics identifier and reports the public episode identifier/title, starts, active listening seconds, progress milestones, completion, pauses/resumes and player source to our first-party audio analytics. It continues measuring actual playback when new-tab pages close, excludes paused/buffering time and seek jumps, respects browser Do Not Track and Global Privacy Control signals, and stops reporting when product reporting is disabled. Unsent audio events are capped locally and expire after seven days; retries retain event identifiers to prevent double counting. Searches, task text, custom URLs, screenshots, full error messages/stacks, and general browsing history are excluded. A first name entered for the greeting stays on this browser and is not included in reports. Verified account connection may associate an installation with your account; different installations are not merged through IP addresses or device fingerprints. Typed names/emails alone never establish account identity. The server receives the request IP through trusted hosting proxies, retaining administrator-only security receipts for seven days; IP addresses are not installation identifiers. Country and acquisition attribution remain unknown unless a trusted source is available. Detailed events are retained for 90 days, and installation records and account-link history expire after 13 months without server contact through the scheduled retention job. Uninstall receipts are best-effort signals, and inactivity is not recorded as an uninstall. Uninstalling the extension stops future local reporting. Contact us to request access to or deletion of previously collected information. Previously submitted records remain subject to these retention periods and your deletion requests. Restoring default page settings does not reset the installation identifier or its reporting state. Account connection and newsletter choices remain independent.

Support reports. The extension's help form lets you send a question, bug report, or feature request, with an optional reply email and screenshot. Before submission, the form explains that technical diagnostics accompany the message: extension version, browser and operating-system details, browser languages and time zone, display and viewport size, pixel ratio and color depth, available device-memory and processor information, network status, current extension layout/feed/component and public story path, appearance preferences, navigation type, and time since the page opened. Our server adds the client IP address observed through its trusted hosting proxies. Opening the form does not send these details. Submitted messages, diagnostics and optional screenshots are delivered to our support mailbox through our transactional email provider. Screenshots are resized and re-encoded to remove embedded metadata; please review their visible contents before submitting. The form does not access browser history, other tabs, search queries, task text, passwords, account tokens, or website cookies. A connected account's email may prefill the editable reply field. Reports do not create an account or subscribe you to newsletters. A temporary request ID and email-provider idempotency prevent duplicate emails on retries. We use reports for support and product improvement under the contact and retention practices in this policy.

Account connection. If you choose to connect, you sign in on the Superpower Daily website and approve the connection. The extension receives a separate, revocable access token rather than reading or copying your website session cookie. It stores that credential locally and can access your email address, first name, saved stories, followed interests, website reading history and progress, and personalized story suggestions to provide the account features you select. Account credentials and private account responses are kept separate from public content caches and are not included in settings exports.

Optional synchronization. A connected account synchronizes saved and followed items and swipe-history decisions with Superpower Daily. The connection consent also covers merging this browser's existing guest swipe decisions into your account. Swipe records contain Superpower Daily story IDs, actions, and timestamps, not a history of other websites you visit. They prevent previously swiped stories from appearing again across the website and connected browsers. Merely displaying a headline or loading its reading text does not mark it read or completed. Task synchronization requires a separate opt-in: enabling it sends your task text, completion and ordering information, daily priority, and any linked Superpower Daily story or tool destination to your account. Changes made offline may be queued locally and sent when connectivity returns. Focus-session timers remain on the device.

Optional focus website blocking. If you enable blocking in Task settings, Chrome asks for access only to the website domains you select, including their subdomains, and the optional declarativeNetRequestWithHostAccess permission. During a running focus session, the extension redirects top-level visits to those domains to its own locally bundled focus page. It can also redirect an already-open selected website when blocking starts or that tab is revisited. Blocking stops when you pause, end, or finish the session, disable blocking, or revoke the required site access. Your chosen domain list stays in local browser storage and is not synchronized to your account or sent in analytics. The extension does not retain attempted visits, website contents, or a browsing-history log for this feature. The block page works without our backend and uses the task and timer already stored on this device. You can edit or clear the domain list in Task settings and manage granted site access in Chrome extension settings.

Content and network requests. Enabled components request public news, story text, background images, and media metadata from Superpower Daily as needed. A local cache reduces repeat downloads and supports limited offline use. Our hosting and security providers receive the IP address and technical request information needed to serve and protect these requests, and server logs may retain that information under the practices elsewhere in this policy. Published images may be fetched from the image host named by the item, which receives the corresponding network request. Private account requests use a separate authenticated connection over HTTPS.

Search and media. Searching with Google or DuckDuckGo sends your query to that provider when you submit it; its privacy policy applies. Superpower Daily search sends the text you enter to our search service after you begin typing a qualifying query. Search queries are not saved in the extension's persistent content cache, although ordinary server request logs may contain them. Opening a custom link, game, video, tool, event, or full article contacts its destination. Podcast audio streams only after you press Play, and can continue after a new-tab page closes. You can pause or stop it using the player controls. Videos open their website page rather than loading an embedded video player automatically in the new tab.

Focus sounds. Focus sound recordings download from dedicated static audio mirrors only after you press Play or explicitly choose an offline download. These requests do not use our news or account backend and send no account credentials or sound preferences. Static hosting providers can receive your IP address and the requested recording URL in normal delivery logs. Each recording is checked against its original file checksum and kept in a bounded local audio cache for offline use. The extension requests unlimitedStorage to protect this cache from normal browser quota eviction, but limits downloaded audio to 250 MiB. You can download selected or all sounds, cancel downloads, or clear recordings from Offline sounds. A first download requires internet access; already cached recordings can play while our services are unavailable. Your selected sounds, volumes, virtual map positions, automatic-walk preference, and stop timer are stored locally; they are not sent to Superpower Daily, an AI provider, or an audio service, and do not sync to your account. The sound map uses virtual coordinates and does not access your real location or microphone. Playback can continue after a new-tab page closes, and you can pause it from Sounds in any new tab. A browser restart restores your sound preferences without automatically resuming playback.

Optional weather. Weather is off by default. You can choose a city without granting location permission. The extension stores the selected city’s rounded coordinates, label and time zone, your temperature-unit preference, and a bounded forecast cache on this device. It does not track your position, export the city with layout settings, or sync it to your account. City searches use a bundled GeoNames city index and are not sent to a geocoding service. Weather requests send the city coordinates to our weather endpoint, which forwards them to MET Norway using our server identity; your browser IP address and account credentials are not forwarded to MET Norway. Normal requests to Superpower Daily can appear in server logs. You can change the city or turn weather off in Customize → Preferences. Turning weather off stops weather requests; removing the extension or clearing its local data removes the saved weather city and cache.

Data use and sharing. The extension does not request access to your general browsing history, browser bookmarks, cookies, or unrelated page contents. The weather feature uses a city you choose and does not request device location access. First-party product analytics is described above. The extension does not add advertising trackers or browser-history monitoring. We use extension account information and synced activity to provide the features described above, not to sell user data, target advertisements, or determine creditworthiness or lending eligibility. Service providers may process requests and stored account information on our behalf to operate and protect these features. Extension tasks, background photos, account credentials, and custom links are not sent to an AI provider for training or content generation; daily background artwork is prepared separately from private extension data.

Optional extension notifications. Desktop alerts are off by default. If you enable them, Chrome asks for notification permission. Breaking news and live-coverage start alerts use our existing push service; we store the subscription endpoint, encryption keys, selected alert types, quiet hours, time zone, and an opaque browser identifier. A one-time connection page links that identifier with an existing website subscription to avoid duplicate news alerts in the same browser. This does not sign you in or change email preferences. Focus-completion alerts are scheduled locally and use generic text; your task text is not sent for notification delivery. You can pause or disable all extension alerts in Customize → Preferences. Turning news alerts off removes the extension push subscription when our server is reachable; local delivery stops immediately, including offline. Delivery history expires after seven days, and inactive subscriptions after 180 days.

Retention. Settings, background photos, local task documents, and guest swipe records are kept on the device until you clear the extension's data or uninstall it, unless replaced or evicted earlier. Deleted task records can remain in local and synced task documents to support Undo and synchronization. The local swipe-history cache retains up to 20,000 decisions and evicts older entries when that limit is reached; account history is retained separately. Content caches expire or are evicted according to their type and size limits.

Your controls. You can edit or delete tasks, remove saved stories and follows, replace your background photo or choose a different background, and reset appearance settings through the extension. Resetting the layout does not erase tasks or synced account history. Undo reverses the last swipe decision; Review again replays stories without deleting history on other devices. Turning task sync off stops synchronization and leaves a local copy. Disconnect revokes the extension's account access when the server confirms it, but does not delete your Superpower Daily account or information already synced to it. Uninstalling removes extension-local data, not server-side account records. Contact us using the details below to request access to or deletion of retained account information, subject to the retention requirements described in this policy.

When you participate in a story discussion, we store your account ID, chosen public name, comment text, optional demo link, replies, poll selections, reports, and submission dates. Comments that pass automatic checks, names, demo links, and dates are publicly visible and may be indexed by search engines. We do not publicly display your email address or individual poll selections; poll results are shown in aggregate. Editors can review contributions and participation records to moderate the service and measure response.

We use automated rules and AI-assisted checks to detect abuse, spam, repetitive submissions, advertising, and exposed private information in discussions. Comment text, attached images (including visible text), the chosen public name, an optional demo URL and publicly accessible destination text or metadata, and relevant public story or reply context may be sent to OpenAI for this screening. Public story and published discussion text may also be processed to prepare and review contextual Superpower Daily replies; we do not include your account email, account ID, IP address, or poll selections. We record the verified submission IP address for administrator-only network restrictions, and keep moderation outcomes, incidents, warnings, restriction end times, content fingerprints, and usage records to enforce the guidelines and prevent abuse. These records are not public. The rolling 30-day incident window determines automatic restrictions; older records may remain for audit and appeals. Uploaded images are stored privately until their comment is published. Removing a comment withdraws public access to its images; files with no remaining submitted comment are queued for deletion. Unused uploads expire after 24 hours. Content fingerprints and non-content moderation records may remain after a comment is deleted. Automated decisions can be reviewed by the editorial team through the Contact page.

You can delete your comments and update or remove a poll response while its discussion is open. Deleting a comment removes its text and demo link from the discussion. Earlier poll versions retain their associated responses. Contact us to request removal of a closed or earlier poll response or other discussion data. Moderation and abuse records may be retained as needed to operate and protect the service.

If you leave a discussion to sign in, we may temporarily save your draft in browser storage so it can be restored on your return. Drafts expire after one hour and are removed when you submit them or next revisit the discussion after expiry. Newsletter feedback remains separate from public comments and is not automatically published as a discussion contribution.

When you read in Swipe, we may download up to ten upcoming stories and ten recently opened stories to this device. Downloads contain public story content and expire after seven days. You can clear them from the reader menu or by clearing site data. Private account pages, payment forms, and admin pages are not downloaded.

If you enable notifications, we store this device's push endpoint, encryption keys, category preferences, delivery time and time zone. Signed-in readers can also opt into followed-interest digests and comment reply alerts. News alerts are limited to two per local day, with a separate limit of four grouped reply alerts. Notifications use your browser vendor's push service and are separate from email. Pause or turn them off in Notifications settings. Delivery records are retained for seven days and inactive subscriptions for up to 180 days.

Push subscription records are removed when you turn notifications off, when the push service reports they have expired, or after 180 days without renewal. Delivery records are retained for up to seven days to prevent duplicate alerts. Downloaded reading activity remains on this device and can sync after you reconnect and sign in.

This Privacy Policy explains how Superpower Daily collects, uses, shares, and protects information when you visit our website, use the Superpower Daily New Tab extension, subscribe to the newsletter, contact us, or reserve sponsorship placements.

By using Superpower Daily, you acknowledge the practices described in this policy. If you do not want information handled this way, you should not use the website or extension, subscribe, or submit sponsorship information.

We may collect information you provide directly, including your email address, name, company, phone number, website, sponsorship details, ad copy, uploaded creative assets, contact-form attachments, notes, and messages you send us.

If you reserve sponsorship inventory, we may collect billing email, company name, contact name, requested placement type, selected issue dates or campaign starts, selected pages, categories, or trackers, campaign goals, audience fit notes, CTA links, ad copy, logos, images, files, and asset delivery notes.

If you contact us, respond to a survey, submit feedback, or otherwise communicate with us, we collect the information included in that communication. Contact-form submissions may include the reason for contacting us, organization, subject, message, related URL, embargo release date and time zone, acknowledgment of embargo terms, and attachment names, types, sizes, and contents.

When you visit the website or interact with emails, we may collect technical information such as IP address, device type, browser, operating system, referring page, pages viewed, timestamps, approximate location, email open events, link clicks, and similar usage data.

We may collect this information through cookies, pixels, server logs, analytics tools, and similar technologies.

Depending on how you use Superpower Daily, the personal information we collect may include identifiers, contact information, commercial information, internet or network activity, approximate location, professional or company information, user-submitted content, and communications with us.

We do not intentionally collect sensitive personal information unless you choose to include it in a message, sponsorship note, uploaded file, or other submission.

When you subscribe, we use your email address to send Superpower Daily and related updates. We may use subscription tools to manage delivery, unsubscribes, and email performance.

If you verify a Superpower Daily account, we create a local account record containing your email address, profile information, newsletter frequency, Beehiiv subscriber identifier, and account activity timestamps. We do not create a local account record merely because you subscribe.

While you are signed in, we also store stories you save, your reading history and approximate progress, and the coverage areas or organizations you follow. We use this information to provide your account library, help you resume reading, and personalize your account briefing.

If you react to a story, we store your current like or dislike and any optional reason you select. You can change or remove a reaction at any time from the story page.

We may measure email opens, clicks, delivery status, unsubscribes, and other performance signals so we can understand what readers find useful and keep the list healthy.

You can unsubscribe using the unsubscribe link in our emails or by contacting us. Unsubscribing from the newsletter does not automatically stop transactional emails related to sponsorship reservations, invoices, or support requests.

If you reserve sponsorship inventory, we collect the information needed to evaluate, schedule, invoice, and fulfill the placement. This may include billing email, company information, requested issue dates or campaign starts, selected destinations, ad copy, CTA links, logos, images, and related notes.

We use sponsorship information to hold inventory, generate invoices, send payment and reminder emails, review submitted materials, prepare placements, prevent duplicate bookings, and keep records of sponsor relationships.

For website sponsorships, we may record viewable impression and click events, campaign page paths, responsive placement surfaces, and event timestamps so we can pace delivery, fulfill stated guarantees, prevent duplicate event counting, and provide sponsor reporting.

Uploaded logos, images, and creative materials may be stored with our hosting, database, file-storage, or operational service providers so we can review and publish the placement.

We use contact submissions to route messages to the appropriate editorial, embargo, partnership, sponsorship, corrections, or reader-support inbox; evaluate the request; communicate with you; prevent abuse; and maintain an operational record of delivery.

Attachments submitted through the contact form are transmitted with the inquiry email to the selected inbox. We store attachment metadata with the inquiry record, but the contact form does not write those files to a public uploads directory.

Embargo details are used to evaluate whether we can accept the requested terms and to avoid publication before an embargo we have expressly accepted in writing. Submitting embargoed material does not itself create an NDA or guarantee coverage.

Do not include passwords, financial credentials, medical records, or sensitive personal information that is not necessary for us to evaluate your request.

Payments are processed through third-party payment providers. We do not store full payment card numbers on our servers.

Payment providers may collect billing details, payment method information, fraud signals, tax information, and transaction records according to their own terms and privacy policies.

We may receive invoice status, payment status, customer identifiers, amounts paid, due dates, and related transaction metadata so we can manage reservations and accounting.

We use information to operate the website, send the newsletter, respond to requests, manage sponsorship reservations, process invoices, improve content, prevent abuse, and comply with legal obligations.

We may use aggregated or de-identified information to understand readership, performance, and sponsor interest.

We may also use information to personalize or prioritize content, maintain the archive, classify stories, measure newsletter engagement, debug technical issues, protect the site, and enforce our terms.

Reader engagement may contribute to automated story-performance and newsletter-ranking scores. Editorial importance, novelty, source reliability, freshness, duplication, and reader interests remain separate inputs, and editors retain control over newsletter selection and ordering.

We may use cookies, pixels, analytics tools, and similar technologies to understand how readers use the site and newsletter, remember preferences, measure performance, and improve the experience.

Our first-party analytics may record when a story or disclosed sponsor placement was displayed, its position and page surface, whether it was opened or clicked, active foreground reading time, approximate reading progress, completion, saves, shares, outbound link clicks, reactions, newsletter link clicks, and interactions with our audio players. Audio measurement may include starts, active listening time, progress milestones, completion, pauses, seeking, playback-speed changes, navigation between recordings, and the player surface used. We distinguish active reading from time when a tab is hidden or inactive, and active audio listening from time when playback is paused.

We use a pseudonymous browser identifier and a session identifier for readers who are not signed in. We do not use this system to store raw IP addresses, full browser fingerprints, or precise location.

Your browser may let you block or delete cookies. Some site features may not work as intended if cookies are disabled.

Email pixels and tracked links may help us measure whether emails were delivered, opened, clicked, or marked as inactive. This helps us improve the newsletter and avoid sending unwanted email.

Superpower Daily may use software and AI-assisted tools to summarize public information, categorize stories, identify related topics, prepare drafts, improve search, or help editors work faster.

We do not use private sponsorship payment details to train public AI models. If you submit sponsor materials or notes, they may be processed by operational tools only as needed to provide the sponsorship workflow, review assets, or communicate with you.

We may share information with service providers that help us operate the website, send email, process payments, store files, analyze usage, or provide customer support.

We may also share information when required by law, to protect rights and safety, to investigate abuse, or as part of a business transfer such as a merger, acquisition, financing, or sale of assets.

We do not sell personal information in the traditional sense. We also do not share personal information for cross-context behavioral advertising unless we provide any notice and choice required by applicable law.

Superpower Daily may use third-party services for newsletter delivery, transactional email, payments, analytics, hosting, databases, file storage, security, and other operations. Those services may process information according to their own privacy policies.

Newsletter subscription and delivery features may be powered by Beehiiv. Beehiiv may process subscription, delivery, unsubscribe, and engagement information according to Beehiiv's Privacy Policy and Terms of Use.

Our website and newsletter may link to third-party websites. We are not responsible for the privacy practices of those sites.

We keep information for as long as needed to provide the website, newsletter, sponsorship services, comply with legal obligations, resolve disputes, and enforce agreements.

Newsletter subscription records are generally kept while you remain subscribed and for a reasonable period afterward to honor unsubscribe requests and maintain compliance records.

Local account records are generally kept while the account is active and for a reasonable period afterward for security, support, and compliance purposes.

Sponsorship, invoice, payment-status, and accounting records may be kept longer where needed for taxes, financial reporting, dispute resolution, fraud prevention, and contract administration.

Uploaded creative assets may be retained while the sponsorship is active and for a reasonable period afterward for records, proofing, reporting, or reuse if you ask to book another placement.

Contact inquiry records, including message content, delivery status, and attachment metadata, may be retained for a reasonable period to respond, document editorial communications, resolve disputes, prevent abuse, and maintain newsroom records. Copies of attachments may also remain in the receiving email system according to our provider and inbox retention settings.

Raw first-party story events are retained for up to 13 months. Daily article aggregates and de-identified performance summaries may be retained longer so we can compare performance over time. Account-level saves, follows, reading state, and reactions are generally retained with the account.

You can unsubscribe from emails at any time. You may also contact us to request access, correction, deletion, portability, restriction, or objection regarding personal information, subject to applicable law and verification.

Depending on where you live, you may have additional privacy rights under local laws.

We may need to verify your identity before fulfilling a privacy request. We may deny or limit requests where permitted by law, including when we need to keep information for security, legal, accounting, dispute, or transaction purposes.

If you are a resident of California or another US state with a consumer privacy law, you may have rights to know, access, correct, delete, or obtain a copy of certain personal information, and to opt out of certain uses or disclosures.

We do not knowingly sell personal information or share it for cross-context behavioral advertising as those terms are commonly used in state privacy laws.

To exercise privacy rights, contact hello@superpowerdaily.com. We will respond as required by applicable law.

Superpower Daily is operated from the United States. If you access the website or subscribe from outside the United States, your information may be transferred to, stored in, or processed in the United States and other countries where our service providers operate.

Those countries may have privacy laws that differ from the laws where you live.

We use reasonable administrative, technical, and organizational measures to protect information. No website, email system, or internet transmission is completely secure.

If you believe your information has been provided to us in error or misused, contact us promptly.

Our first-party automatic story analytics honors enabled Global Privacy Control and browser Do Not Track signals. When either signal is present, automatic impression, reading-time, progress, and click analytics are not recorded by that system.

Account actions you intentionally request, such as saving a story, following a topic, changing newsletter frequency, or submitting a reaction, are still stored as needed to provide that feature.

Superpower Daily is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided us personal information, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

Your continued use of Superpower Daily after changes are posted means you acknowledge the updated policy.

Questions about this Privacy Policy or privacy requests can be sent to hello@superpowerdaily.com.