Privacy Policy
Last updated: 30 August 2026
The short version
PageTOC collects nothing. There is no account, no analytics, no crash reporting, and no server. The extension contains no networking code — no fetch, no XMLHttpRequest, no WebSocket, no sendBeacon — and the app makes no network calls of its own. Everything PageTOC does happens on your device.
Why PageTOC needs access to web pages
A table of contents is built from a page’s own heading structure, so PageTOC has to read the page you are looking at. That is the whole of what the permission is used for: reading the page’s structure, on your device, while you are looking at it.
PageTOC is granted access per site by Safari, and only when you use it. It does not run on pages where you have not invoked it.
What is stored on your device
- Your settings: table of contents depth, and whether the floating button is shown.
- The sites you chose to hide PageTOC on — added only when you hide one, and removable in the app.
- Where you dragged the panel or the floating button, remembered per site.
This data is stored by the operating system in the app’s own container and in the extension’s local storage. It is never transmitted anywhere. Deleting PageTOC deletes all of it.
What is never stored
- The addresses of pages you visit.
- How far you have read, or which heading you were on.
- Any text or other content from the pages themselves.
- Any identifier for you or your device.
A hidden site is a record you created deliberately, and it is stored as an origin such as https://example.com — never as a page address.
Third parties
None. PageTOC contains no third-party SDKs, no advertising, no attribution frameworks and no tracking of any kind. Nothing is shared with anyone, because nothing is collected.
Sending us feedback
If you email support, the message contains whatever you chose to write, plus the app version in the subject line. That email reaches a person’s inbox and is not processed by any support system. Nothing is prefilled from your browsing beyond what you type or paste yourself.
Children
PageTOC is rated 4+ and collects no data from anyone, including children.
How to verify all of this
Run PageTOC behind an HTTP proxy and observe that it produces no traffic at all.
Changes
If a future version of PageTOC ever sends anything off your device, this policy and the App Store privacy label will be updated before that version is submitted, and the change will be described in the release notes.