Last updated September 25, 2026
Firstlight privacy policy
Firstlight is a browser extension for Chrome and Firefox that replaces the new tab page with a dashboard of widgets you arrange yourself.
What Firstlight stores
Your dashboard layout, widget settings and what you put in your widgets (to-do items, notes, habit history, timers), along with cached data from the services below, are kept in your browser’s extension storage on your device. A wallpaper image you upload is stored there too.
Sync is off until you turn it on. Then a copy of your dashboard and settings is mirrored to your browser’s sync storage, which your browser syncs through your own account: Chrome Sync with your Google account, or Firefox Sync with your Mozilla account. It never passes through a server of ours. Cached data, including everything from Google and Gmail, your recent searches and your uploaded wallpaper, stays on the device.
What Firstlight sends
Firstlight has no servers, no accounts, no analytics and no ads. We never receive your data. Some widgets fetch data straight from a third-party service, and only when you use the widget that needs it. These requests carry no account information (Google sign-in, below, is the one exception). Like any web request, the service sees your IP address.
| Service | What is sent | For |
|---|---|---|
| Open-Meteo | Your coordinates, or a city name you search for | The Weather widget’s forecast and location search, and the Sunrise & sunset widget |
| Google, DuckDuckGo or Bing | What you type in the search bar | Search suggestions. DuckDuckGo and Bing give them when you pick those engines; Google gives them for Google, Startpage and your browser’s default engine. |
| Wikimedia Commons or Lorem Picsum | A request for the day’s photo, with the photo topic you picked | The background photo. A daily photo is the default background; choose a wallpaper or a plain background to stop these requests. |
| Wikipedia | Today’s date and your dashboard’s language | The On this day widget |
| ZenQuotes or Quotable | A plain request | The quote of the day in the Daily focus widget |
| CoinGecko | The coins you picked, your currency, and what you type when you search for a coin | Prices, charts and coin logos in the Crypto widget |
| Google News | The topic or search terms, language and country you picked | The Google News widget |
| Feeds you add | A request for the feed’s address (for a YouTube channel you add by its handle, also the channel’s page) | The News feed widget |
Fonts are bundled with the extension, the focus sounds are generated in your browser, and the word of the day comes from a list inside the extension.
Google Calendar and Tasks (optional, Chrome only)
If you connect a Google widget, Firstlight signs in through Chrome’s built-in identity system and asks for one permission at a time, only for the widget you connect:
| Scope | Used for |
|---|---|
calendar.readonly | Reading your calendars and upcoming events to show them in the Google Calendar widget. Read-only. |
tasks | Showing your Google Tasks and letting you add, edit, complete and delete tasks from the widget |
- Google data goes directly between Google’s APIs and your browser. It’s shown in your new tab and cached in local extension storage, so widgets can show it between refreshes. It’s never synced, never sent to us or anyone else, never used for advertising, never read by humans and never sold.
- Sign-in tokens are issued and kept by Chrome. Firstlight never stores them itself and never sees your Google password.
- Firstlight’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Disconnect a widget from its ⋯ menu, which deletes that widget’s cached Google data, or revoke Firstlight’s access at
myaccount.google.com/permissions.
Firefox and Edge have no working version of Chrome’s sign-in system, so the Google Calendar and Tasks widgets aren’t available there.
Gmail (no sign-in)
The Gmail widget doesn’t use Google sign-in. When you connect it, Firstlight asks for permission to read mail.google.com and fetches Google’s unread-mail feed with the Gmail session already in your browser. The feed holds only your unread messages’ senders, subjects, dates and one-line snippets, never message bodies or attachments. It’s shown in your new tab and cached on your device only, never synced or sent anywhere else. Disconnecting the widget removes the permission and deletes its cached data.
Permissions
| Permission | Why |
|---|---|
storage | Save your dashboard and widget data on your device, and in your browser’s sync if you turn it on |
search | Run a search in your browser’s default search engine from the search bar |
geolocation | Find your location for the Weather and Sunrise & sunset widgets, only after you choose to use it |
topSites | Show your most visited sites in the Bookmarks widget |
sessions | List and restore recently closed tabs in the Top sites widget, which older dashboards may still have |
favicon (Chrome only) | Show site icons from the browser’s own icon cache |
notifications | Tell you when a pomodoro phase ends, if you turn that on |
identity (Chrome only) | Optional Google sign-in for the Google Calendar and Tasks widgets |
clipboardRead, clipboardWrite | Copy and Paste in Firstlight’s right-click menu on its own page |
| Access to the services above | Fetch data for the widgets that use them |
bookmarks (optional) | Import your browser bookmarks into the Bookmarks widget, or show them in the All bookmarks widget. Asked only when you do either. |
| Access to sites you add (optional) | Fetch an RSS feed you add, or Gmail’s unread-mail feed when you connect the Gmail widget. Asked only then, for that one site. |
None of these are used to track your browsing. Firstlight runs only on its own new tab page and doesn’t read or change the websites you visit.
Deleting your data
Delete items in a widget, or remove the widget. Disconnecting a Google or Gmail widget deletes its cached data. Removing the extension deletes everything it stored on your device. Turning sync off only stops syncing and leaves the synced copy for your other devices; clear your browser’s synced extension data to remove it.
Children
Firstlight isn’t directed at children under 13 and doesn’t knowingly collect personal information from anyone.
Contact
Questions: max7up.support@gmail.com