Chrome extension privacy
Effective July 21, 2026
DiagEZ for Mermaid Live has one purpose: turn a Mermaid Live diagram into an embeddable DiagEZ image URL. It does not sell data, display advertising, or track browsing activity.
Information handled
When activated on mermaid.live, the extension reads the current tab URL to decode the Mermaid source stored in its #pako: fragment. Conversion happens locally in Chrome. The extension does not inspect the Mermaid Live editor DOM, cookies, account data, or browsing history.
Local storage
The extension stores only rendering preferences such as image format, theme, background, scale, width, padding, and preferred copy format in Chrome local extension storage. Mermaid source and generated URLs are not persisted by the extension. Removing the extension deletes its local settings.
Network transmission
Creating and copying a URL does not upload the diagram. When a generated image is previewed, opened, or embedded, the browser requests https://diagez.com/r/…. The Mermaid source is Base64URL-encoded in that request URL and is processed to render the requested image. Do not put passwords, API tokens, personal records, or other secrets in diagram URLs.
Sharing and retention
The extension does not sell or transfer user data for advertising, profiling, or unrelated purposes. DiagEZ infrastructure may retain ordinary security and operational logs, but application logging is designed not to record full Mermaid payloads. Cached rendered artifacts may remain available according to the service's cache policy because generated URLs are deterministic and public.
Permissions
- mermaid.live site access: adds the one-click copy action and reads the current pako URL.
- activeTab: lets the popup import the Mermaid Live tab the user explicitly opens it from.
- storage: saves rendering preferences locally.
Chrome Web Store Limited Use
Data obtained through Chrome APIs is used only to provide or improve the extension's single-purpose diagram conversion feature. It is not used for personalized advertising, credit decisions, or sale to third parties, and is not made available for human review except when required for security, legal compliance, or user-requested support.
Contact
Questions about this policy can be sent to [email protected].