Privacy Policy

TL;DR

TocMap does not collect, store, transmit, or sell any user data. All processing happens entirely within your browser. There are no servers, no databases, no analytics, no tracking — zero.

Data Collection

TocMap does not collect:

• Personal information (name, email, address)
• Browsing history or visited URLs
• Page content or DOM data
• Usage analytics or behavioral data
• Device information or fingerprints
• Cookies or tracking identifiers
• Location data

There are no exceptions to this rule. This is not a "we collect data but promise not to misuse it" policy — we simply do not collect data at all.

Local Processing

All of TocMap's functionality runs entirely within your browser:

• Heading detection — scans the current page's DOM locally
• Sidebar rendering — built using Shadow DOM, isolated from the page
• Settings storage — saved to chrome.storage.sync (synced across your devices via your browser account) and chrome.storage.local (device-only)
• AI-assisted recognition — if you choose to use this feature, API requests are sent directly from your browser to the AI provider you configure. TocMap never sees or routes your API key or requests.

AI-Assisted Recognition (BYOK)

TocMap offers an optional AI-assisted page analysis feature that uses your own API key:

• Your API key is stored locally in chrome.storage.local and never leaves your browser except to make direct API calls to your chosen provider.
• DOM data sent to the AI provider is compressed and stripped of sensitive content (scripts, styles, form values, images).
• TocMap does not proxy these requests. They go directly from your browser to the AI provider's endpoint.
• This feature is entirely optional. TocMap works fully without any AI configuration.

By using this feature, you agree to your chosen AI provider's own privacy policy and terms of service.

Third-Party Services

TocMap does not integrate with any third-party analytics, advertising, or tracking services within the extension itself.

This website (tocmap.com) may use:

• Google Analytics — to understand site traffic patterns (anonymized)
• Google AdSense — to display advertisements

These services operate only on this website and have no connection to the browser extension.

Permissions

TocMap requests the following browser permissions:

• activeTab — to access the current page's DOM for heading detection
• storage — to save your preferences and settings locally
• scripting — to inject the sidebar UI into web pages

Each permission is used solely for its stated purpose. No permission is requested unnecessarily.

Children's Privacy

TocMap does not knowingly collect data from anyone — adults or children. Since no data is collected at all, this policy applies equally to all users regardless of age.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. If we ever change our fundamental "no data collection" commitment, we will clearly communicate that change.

Contact

If you have questions about this privacy policy, please contact us at our contact page.

Last updated: May 2025