TrackMedia Chrome Extension Privacy Policy

Last updated: 19 October 2026

This policy covers the TrackMedia extension for Google Chrome (the "extension"), published by NQM STUDIO LTD, 128 City Road, London EC1V 2NX, United Kingdom ("we", "us"). It adds to the main TrackMedia Privacy Policy, which covers your TrackMedia account and everything stored in it.

What the extension does

Substack has no public posting API. The extension lets TrackMedia schedule your Substack Notes and newsletter posts by placing each one on Substack's own scheduler from your browser, while you are signed in to Substack. It works only together with a TrackMedia account. It has no other function.

Your Substack sign-in never leaves your browser. The extension talks to Substack using the sign-in your browser already has. It does not read, store or send your Substack password or cookies. Your browser attaches them to requests to Substack, as it does when you use Substack's website. We never receive them.

What the extension stores on your device

In Chrome's local extension storage, and nowhere else:

the TrackMedia key you link from the TrackMedia dashboard. This key can only connect your Substack account and sync scheduled items. It cannot create, edit or publish posts;
the time and result of the last sync, shown in the extension's popup;
a short journal of items placed on Substack but not yet confirmed to TrackMedia, so a lost confirmation is re-sent rather than the item being posted twice. Entries are removed once confirmed.

Unlinking the extension (popup → "Unlink this browser") deletes the key. Removing the extension deletes all of it.

What the extension sends to TrackMedia

Only to api.trackmedia.app, over HTTPS, with your TrackMedia key:

When you connect a Substack account: your Substack user ID, handle, display name, profile photo link and, for newsletter posts, the names and addresses of the publications you belong to. We use them to show which account is connected and which publications you can post to.
After each scheduled item: the ID Substack gave it, the time it is scheduled for, whether it was posted immediately or, if it failed, Substack's error message. We use them to show you the item's status and to keep later edits and deletions in step.

What the extension sends to Substack

The text and images of the Notes and posts you scheduled in TrackMedia, the time to publish them, and, for posts, the title, subtitle and audience you chose. It also reads your Substack profile (to check it is acting as the right account and on your own publications) and your list of scheduled Notes (to confirm Substack accepted the schedule). It deletes a scheduled item on Substack only when you delete or change it in TrackMedia, and never touches items from a different Substack account. Substack's handling of that content is governed by Substack's privacy policy.

What the extension downloads

The images you attached to a Note, from TrackMedia's media storage, using links the TrackMedia API provides for your own scheduled items.

What the extension does not do

It does not read your browsing history, the pages you visit, or what you type.
It runs on TrackMedia's dashboard (go.trackmedia.app) only to let the dashboard link it and ask it to sync. It does not run on any other website.
It contains no analytics, advertising, tracking or third-party code, and loads no code from the internet.
We do not sell your data, use it for advertising, or use it to decide credit or lending.

Limited Use

The use of information received from the TrackMedia Chrome extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data the extension handles is used only for its single purpose, scheduling your Substack Notes and posts from TrackMedia, and is not transferred to anyone except Substack (where you asked it to be posted) and the infrastructure providers that host TrackMedia, as described in the main privacy policy. No person at TrackMedia reads it, except with your permission, to investigate abuse or a security issue, or where the law requires.

Keeping and deleting data

Data on your device is kept until you unlink or remove the extension. Data sent to TrackMedia is part of your TrackMedia account: disconnecting the Substack account in TrackMedia removes the data we hold for it, and deleting your TrackMedia account removes everything (see the Data Deletion page). You can also revoke the extension's key at any time in TrackMedia under Settings → API keys.

Changes

If the extension starts handling data in a new way, we will update this page before releasing that version and change the date above.

Contact

NQM STUDIO LTD
128 City Road, London EC1V 2NX, United Kingdom
maruf@trackmedia.app