Skip to content

Privacy and permissions

Hostux.page has no account, no ads, no cookies and no analytics. Your settings, links, notes, first name and cities are saved in the browser. What leaves it is described here; the privacy policy is the reference.

Feature What Hostux receives What the provider receives
Weather The city name you search for, then its rounded coordinates Open-Meteo: the same data, without your IP address
Online wallpapers The category or image requested Wallhaven, Bing, NASA: the server’s request, without your IP address
Server quotes The collection requested The original sites (Kaamelott, OSS 117, Pas futé futé, JokeAPI…): the server’s request, without your IP address
Site icons The host name of each link DuckDuckGo: that host name, without your IP address
Sync with a code An encrypted copy, unreadable without the code Nothing

The server keeps a technical log for fourteen days: IP address, date, method, path without parameters, response code and size.

  • Search: the text you submit goes to the chosen engine, under its own rules. Link suggestions while you type are worked out in the page.
  • Ask the site itself for its icon (off by default): when DuckDuckGo has no icon, or for an address on your own network, the browser asks the link’s site for /favicon.ico, over HTTPS only. That site then sees your connection.

To stop a link from triggering any icon request, give it an emoji or two characters as its icon, or untick Site icons.

Your personal images and linked folders never leave the device. Choosing a folder uploads nothing.

The extension has a single required permission, storage. The others are optional and requested when you need them:

Permission For
topSites, bookmarks Importing links from the browser
notifications The timer’s end-of-session notification

In Firefox, two optional data consents come on top: locationInfo for the weather, browsingActivity for site icons (including those asked of the site itself). Without them, weather and icons stay off; the rest of the page works.

Removing a permission prevents future access but does not delete what was already imported: links that came from your bookmarks stay in the space.

A JSON export is a plain-text file: it contains your note and your links. Sync with a code encrypts the space before sending it; the code gives access to the copy, so keep it to yourself. Browser sync follows the rules of your browser’s service. Details in Backups and Sync.