Staple — Privacy Policy

Effective October 9, 2026

Staple is a Chrome extension that compiles Substack posts you can already read into a single PDF, EPUB or HTML file. This policy explains what it does with your data. The short version: everything happens in your browser, and nothing is sent to me or anyone else.

What Staple reads

• Your Substack subscription list and posts. When you ask it to, Staple requests your subscription list, and the posts from the publications and dates you choose, from Substack. To check whether you can read a paywalled post in full, it fetches that post while it searches.
• Your existing Substack sign-in, indirectly. Staple cannot see your Substack password or cookies. Your browser attaches your existing Substack sign-in to Staple's requests to Substack, which is how paid posts you subscribe to can be included.
• Images in those posts, loaded through Substack's image server (substackcdn.com) so they can be shown in the book and embedded in EPUB and HTML files.
• Custom-domain publications. Some Substack publications use their own web address. Staple asks your permission, site by site, before reading any of them.

Staple reads your subscription list and the content of Substack posts in order to build your file. It processes them only on your device: nothing is sent to the developer or any third party, and nothing is sold or used for advertising.

What Staple stores

Your publication list, any groups you create, your preferences and the books you've started are saved in your browser's local extension storage. They never leave your device. Uninstalling Staple deletes them.

The PDF, EPUB and HTML files you make are saved wherever you choose on your own computer.

Where Staple connects

Apart from links you choose to open, Staple connects only to Substack (substack.com, its subdomains, and the custom-domain Substack publications you approve) and Substack's image server (substackcdn.com). It has no server of its own, and no analytics, tracking, advertising or third-party scripts.

The files Staple makes are for your own reading; Staple doesn't share content with anyone.

Chrome Web Store User Data Policy

Staple's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

If this policy changes, the updated version will be posted here with a new effective date.

Contact

Questions: contact+staple@victorshammas.com

Staple is free and independent. It is not affiliated with, endorsed by or sponsored by Substack Inc.; "Substack" is a trademark of Substack Inc.