Scanlet Bridge — privacy policy

Last updated 17 October 2026

Scanlet Bridge is a browser extension that lets the Scanlet web app talk to printers on your own network. It has no server, no account, no analytics and no telemetry. This page says exactly what it does and does not do with your information.

What it stores

Two values, on your device, in the browser's extension storage (chrome.storage.local):

• the network prefixes you asked it to search, such as 192.168.1;
• the port to ask devices on, normally 80.

Nothing else is persisted. Removing the extension removes both. They are never transmitted anywhere.

What it accesses

With your permission, the extension makes HTTP requests to addresses on your local network to find printers that speak the driverless eSCL/AirScan protocol, and to run a scan when you ask for one. The permission is optional: it is requested only when you press Grant network access or add a specific device by address, and you can revoke it at any time from the extension's options page. Before you grant it, the extension does nothing at all.

Scan images are fetched from your printer and passed through the extension to the Scanlet page you have open. They are held only in memory for that handover. They are not written to disk by the extension, not logged, and not sent to any other party.

What it does not do

• It does not collect personal information — no names, no email, no identifiers.
• It does not send anything to a server operated by us or anyone else. There is no Scanlet server to send it to.
• It does not use analytics, crash reporting, advertising or tracking of any kind.
• It does not read, modify or transmit the content of the pages you visit. Its content script does one thing: relay messages between the Scanlet page and the extension.
• It does not download or execute remote code. Every line it runs ships inside the extension package.
• It does not sell or transfer data to third parties, and has nothing to sell.

Where the extension runs

The relay between the page and the extension is injected only on the published Scanlet app (https://lettly.github.io/scanlet/) and on loopback addresses (localhost, 127.0.0.1), where a locally run bridge may serve the same app. No other website is touched.

The Scanlet web app is separate

Scanlet itself is a normal web app you open in a tab. The documents you build there — page images, recognised text, exported PDFs — are stored by your browser on that site's origin, and are not visible to this extension. Clearing that site's data deletes them. This extension never reads them.

Children

The extension is a general-purpose tool. It collects no data from anyone, of any age.

Changes

If this policy changes, the date at the top changes with it, and the change is visible in the public repository's history at github.com/Lettly/scanlet.

Contact

Questions or corrections: open an issue at github.com/Lettly/scanlet/issues.