Privacy Policy

Last updated: September 2026

Summary

Asana Essentials is built with privacy as a foundational principle. Standup timers and queues operate entirely inside your browser. AI summaries can run 100% locally via hardware-accelerated WebGPU or Chrome Built-in AI, connect to your own local/self-hosted server (e.g., Ollama or LM Studio), or connect directly to online API providers (Google Gemini, OpenAI, Anthropic Claude) using your personal API key. No task data is ever collected, transmitted to, or stored on developer-owned servers. There is zero telemetry, zero tracking, and no external analytics.

What data does this extension access?

Asana Essentials reads the following from your Asana project via Asana's own API (using your existing browser session):

Team member names and IDs — to build the speaker queue
Task names and IDs — to highlight the current speaker's tasks on the board/list view
Project membership — to determine who is assigned to the current project
Task descriptions and comments — to generate AI summaries when explicitly requested by the user

The extension does not ask for or store any login credentials. It piggybacks on your existing authenticated Asana session — if you're not logged in to Asana, the extension does nothing.

What data is stored locally?

The extension uses chrome.storage.local (or the equivalent browser storage API) to persist the following on your device:

Data	Purpose	Retention
Settings (timer, sound, confetti, shuffle, task filter, persona, AI preferences)	Remember preferences and local/online model choices across sessions	Until you change them or uninstall
AI Developer Keys	Stored locally in encrypted browser storage for direct connections to Gemini, OpenAI, or Anthropic	Until cleared in settings or uninstalled
In-Browser WebLLM model weights	Cached in browser Cache Storage for instant offline WebGPU inference	Until cleared via settings or uninstalled
Standup history (up to 30 records)	Show past session stats (speaker names, durations, skips)	Rolling — oldest removed at limit

All stored data is local to your browser profile. It is never synced to the cloud, never transmitted to the extension creator, and is fully removed when you uninstall the extension or clear site data.

What is NOT stored

Asana account credentials or passwords
Personal information beyond display names shown in the speaker queue
Browsing history or page URLs on other websites
Generated summary content (stored in ephemeral session memory only)

What data is transmitted?

Data transmission strictly depends on your active AI summariser configuration:

In-Browser Local AI (WebGPU / Chrome AI): Zero data leaves your computer. All model execution occurs entirely inside your browser's sandboxed environment.
OpenAI-Compatible Local Server (Ollama / LM Studio): Network requests are sent exclusively to your local loopback address (e.g. http://localhost:11434) or specified private LAN server. No data ever reaches the public internet.
Direct API Keys (Google Gemini, OpenAI, Anthropic Claude): Task titles, descriptions, and comments are sent directly and securely over HTTPS from your browser to your chosen provider's official API. No intermediary proxies or developer servers are ever involved.
Privacy Safeguards: No telemetry, analytics, tracking pixels, crash reporting, or external font/asset tracking scripts are loaded. The extension never phones home.

Permissions explained

Permission	Why it's needed
`storage`	Persist settings, API configurations, and standup history locally in your browser
`offscreen`	Instantiate local WebGPU and WebAssembly execution pipelines for offline AI processing without freezing the UI
`host_permissions: app.asana.com`	Inject the standup widget into Asana's UI and fetch project data from Asana's API using your current session
`host_permissions: generativelanguage.googleapis.com, api.openai.com, api.anthropic.com`	Route direct HTTPS requests to AI provider APIs when Direct API Key mode is enabled
`host_permissions: huggingface.co, cdn-lfs.huggingface.co`	Download model weights and configurations for in-browser WebLLM SLMs during local inference

The extension requests no other permissions — no access to other websites, no clipboard, no camera/microphone, no downloads, and no background network access.

Data deletion

You can clear all extension data at any time by:

Using the "Clear History" button in the extension popup
Uninstalling the extension (removes all stored data)
Clearing browser storage for the extension via your browser's settings

Children's privacy

This extension is not directed at children under 13 and does not knowingly collect any personal information from children.

Changes to this policy

If this policy is updated, the "Last updated" date at the top will change. Significant changes will be noted in the extension's changelog.

Contact

If you have questions about this privacy policy, contact the project maintainer.