Links Chrome Extension — Privacy Policy Effective November 5, 2026 — extension version 1.1.4 Links is a BEAM Technologies / BEAM Labs tool for authorized BEAM Workspace users. The extension is a minimal launcher for the existing https://links.beam.nyc/ website. What the extension handles When you click its toolbar icon, the extension reads the active page URL. When you use “Shorten with Links,” it receives the selected link or page URL. It opens the Links website in a compact browser window and passes that URL to the Target URL field. It does not read page titles, page bodies, personal messages, passwords or general browsing history. It does not monitor background browsing, inject scripts, contact an API or store targets or credentials. It requests only activeTab and contextMenus permissions, with no host access. Installation presence Only https://links.beam.nyc/ may ask this extension whether it is installed. The response contains only installed=true and the extension version, allowing the website to hide its installation suggestion. This check does not expose tabs, URLs, browsing history, identity or saved links and cannot trigger capture, open a window or create a link. How the website receives the capture The target initially travels in a URL fragment, which is not part of the website's HTTP request. The website temporarily stores it in sessionStorage for that window and removes it from the visible address. The capture can then be restored after BEAM sign-in. Pending captures expire 30 minutes after capture or the last target edit and are cleared when a link is successfully created or the pending target is cleared. Browser session restoration may restore window-session state. When storage is unavailable, the validated target remains in the sign-in return URL, which may be processed by the normal hosting/authentication infrastructure. Using Links The compact window shows the actual website, including its normal interface, styling, logic and sign-in. No separate extension form or extension account is used. The website authenticates through BEAM's existing Google Workspace and Cloudflare Access services, processes the identity/session required for access, and loads the organization's project/client and saved-link records. It stores the member's profile display name with their account identifiers so authorized users can see names beside links they created. This display name does not change ownership or permissions. The extension never reads authentication cookies or tokens. Capturing a URL only prefills the form. When you choose Copy, QR or Email for a valid unsaved draft (or save using Enter), the website sends the chosen target, descriptor, short address and relevant classification to the BEAM service over HTTPS. Ordinary request metadata, including IP addresses, is received when the website is used. Email sharing in the website When you choose Email, the website opens its own composer. Sending is available only after the operator configures Cloudflare Email Service. Pressing Send Email transfers the recipient, subject, optional note, saved short URL and your reply address to Cloudflare for delivery. Replies go to your signed-in account; the app does not read your inbox or require Gmail permissions. Links retains only request IDs, member identifiers, content fingerprints, state and timestamps for duplicate prevention and sending limits. Recipient addresses and message bodies are not stored in that receipt table. Receipts older than 30 days are removed when another send is requested. Provider processing and recipient mailbox retention are separate. Purpose and sharing Data is used for authorized authentication and link creation, management, QR codes and related analytics. BEAM uses Cloudflare for hosting, data and access services and Google for Workspace sign-in. Data is not sold or used by this extension for advertising, unrelated profiling, lending or creditworthiness. It is not shared for unrelated purposes except where required by law. Link expiration and suggestions Short URL offers Never or a server-enforced expiry, defaulting to 1 year. New Quick and expiring links use ordinary addresses without automatic prefixes; previously issued /t/ and /q/ addresses remain unchanged. Expiry stops redirection without automatically deleting the saved record or previous visits. Quick link only prepares a draft; saving still requires Copy, QR, Email or an explicit form submission. Suggestions reuse the signed-in member's existing saved-link history. Favorites are saved locally in that browser for the signed-in member. The website also stores the first dismissal time and next extension-notice reminder locally, for reminders at day 30, day 90 and every subsequent 90-day milestone. A theme preference cookie is shared between Links and Labs on beam.nyc; it contains only light or dark. Saved links and visits Saved links remain in the BEAM service until managed or deleted by an authorized user. Closing the window, clearing a capture or uninstalling the extension does not delete server records. Public Short URLs are shareable and expose their destination according to that target's own permissions. The Links service records visits to public shortcuts, including request-provided time, IP/location, browser/device and referral information. Visit and activity records may remain after a saved link is deleted. Those service records are separate from the temporary window capture. Controls and contact You can edit or clear the target before creation, manage saved links at https://links.beam.nyc/, or remove the extension. Contact your BEAM Workspace administrator through your usual internal channel for questions about organizational access, retention or deletion. Access requests Anyone may request access at https://links.beam.nyc/request-access. The website collects the submitted name, email and optional organization for review and sends a notification to apps@beam.nyc through Cloudflare Email Service. Request records include a timestamp, duplicate-prevention fingerprint, notification state and a daily-rotating hash of the request IP for abuse limits. Raw IP addresses are not stored in the access-request table. Records older than 90 days are removed when another request is submitted; copies in the operator's mailbox have separate retention. Requesting access does not grant access or verify the supplied email address. The request form does not submit the page URL captured by the extension. Contact apps@beam.nyc about an access request or its deletion. Changes Updates are published at https://links.beam.nyc/legal/links-extension-privacy.txt with an updated effective date.