Privacy Policy
Last updated: May 12, 2026
The short version
Broom collects a small amount of anonymous usage data so we can tell how many people use it. We do not collect personal information, page content, browsing history, or anything that could identify you. The rules you create stay on your device.
What Broom stores
When you sweep an element or plant a garden, Broom saves the rule (a CSS selector and the change to apply) in your browser's local extension storage. This data:
- Lives only on the device where you created it.
- Is never synced, uploaded, or sent to any server.
- Can be wiped at any time by removing the extension or clearing its storage.
Network requests
The extension makes two kinds of network requests:
- Version check. A single request to
yagoarconada.com/apps/broom_files/app-update.jsonto see whether a newer version of Broom is available. - Anonymous usage events. Broom pings a small analytics endpoint hosted on Cloudflare Workers (
broom-analytics.pasalacabra.workers.dev) with three event types: install (once, the first time you run the extension), daily_active (once per calendar day if you have the extension open), and site_saved (the first time you save a rule on a new site). Each event includes a randominstall_idgenerated locally on first run and the extension version — nothing else. We do not send your IP, your identity, the site you are on, the rule you saved, the selector you used, or any page content. The hostname of sites you save rules on is not transmitted.
All requests contain the standard metadata your browser attaches to any HTTP request (IP address, user-agent). We use that information only to count distinct devices and detect abuse; we do not link it to any other dataset and we do not retain it beyond what Cloudflare logs by default.
Page content
Broom reads the structure of the page you are editing in order to build a CSS selector for the element you point at. Page content is processed locally and is never transmitted off your device.
Permissions
storage— to save your rules locally.activeTab— so the popup can talk to the tab you explicitly open it on.- Host access (
<all_urls>) — so your saved rules can be reapplied on whichever sites you choose to use Broom on. No page content leaves your device.
Third parties
The analytics endpoint and the update-check file are both hosted on Cloudflare, which acts as a service provider for Broom. Cloudflare's standard request logging applies. We do not use advertising networks, behavioral trackers, or any third-party analytics SDK (no Google Analytics, no Mixpanel, etc.). There are no third-party scripts bundled into the extension itself.
Children
Broom is not directed at children. The anonymous usage events described above contain no personal data, so we have no way to knowingly identify a user of any age.
Changes
If this policy ever changes, the updated date at the top of this page will change with it. Past versions are visible in this site's git history.
Contact
Questions? Reach out via GitHub issues.