WhatsApp Session Linker · Browser Extension
Effective: 9 July 2026 · Last updated: 9 July 2026 · Version 1.0
This Privacy Policy explains, in full, what the WhatsApp Session Linker browser extension (the “Extension”) accesses, how that information is used, shared, retained and deleted, the permissions the Extension requests and why, and your rights. It applies to the Extension only. The Extension is published by HN30 LLP, operator of the MessageSync.ai service (“we,” “our,” “us”). If you do not agree with this policy, please do not install or use the Extension.
The Extension lets you connect your own WhatsApp number to your own MessageSync account without repeatedly scanning a QR code. It reads your WhatsApp Web session from your own browser and, only when you explicitly click “Transfer,” hands it to the MessageSync account you are already signed into. The Extension has no analytics, no tracking, no advertising, no cookies, and makes no network requests of its own. It never reads your messages, chats, media, or contacts, and it works only on WhatsApp Web.
The Extension has one purpose: to let you link your own authenticated WhatsApp Web session to your own MessageSync account so your WhatsApp number can stay connected on the server side without repeatedly re-scanning a QR code. When your MessageSync dashboard requests a link, the Extension shows a card on the WhatsApp Web tab. Nothing is captured or transferred until you explicitly click Transfer. The Extension does nothing else.
The Extension handles only the following, and only on web.whatsapp.com:
| Data | What it is | Chrome data category |
|---|---|---|
| WhatsApp Web session material | Cryptographic keys and session credentials WhatsApp Web stores locally in your browser (in localStorage and IndexedDB). These identify your linked device to WhatsApp. |
Authentication information |
| Account identifier / login state | The identifier of the logged-in WhatsApp account (e.g. its phone number) and whether you are currently logged in — shown to you so you can confirm the right account before transferring. | Personally identifiable information |
This information is read locally in your browser and is transmitted only to your own MessageSync account, and only on your explicit action (Section 4). The Extension does not maintain any independent database of users.
For the avoidance of doubt, the Extension does not access, collect, or transmit:
The captured session is used for exactly one thing: connecting your WhatsApp number to your own MessageSync account. When you click Transfer, the Extension passes the session to the MessageSync dashboard you are already signed into, using the browser’s built-in, isolated extension-messaging channel. From there it is stored under your account so your number can remain connected. The account identifier and login state are used only to display which account you are about to transfer, so you can confirm it is correct.
After transfer, the session is held under your MessageSync account and its subsequent handling is governed by the MessageSync Privacy Policy.
| Permission | Why the Extension needs it |
|---|---|
host_permissions: https://web.whatsapp.com/* |
To read the session that WhatsApp Web has stored in your browser. This is the only website the Extension can access; it cannot read any other site. |
scripting |
To run the capture logic inside your WhatsApp Web tab when you click Transfer. |
storage |
To keep a short-lived, on-device timer that lets a newly linked device settle before capture. It stays on your machine and holds no personal data. |
externally_connectable (your MessageSync / CRM domain) |
So your own MessageSync dashboard can ask the Extension to begin a transfer. No data leaves the Extension unless you click Transfer. |
The Extension does not keep a persistent copy of your session. It stores only a transient local timer in
chrome.storage.local. After a successful transfer, the Extension clears its local copy of
the captured session from the browser. You can remove all of the Extension’s local data at any time
by uninstalling it. Deletion of the session already transferred to your MessageSync account is handled
under your account per the MessageSync Privacy Policy, or by request to
privacy@messagesync.ai.
Capture happens locally in your browser. Transfer to your MessageSync dashboard uses the browser’s isolated extension-messaging channel and travels only over HTTPS. We apply appropriate technical and organizational measures to protect the information involved. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
Where the EU/UK GDPR applies, we rely on the following legal bases:
Depending on your location (including under the GDPR and the California CCPA/CPRA), you may have the right to:
To exercise any right, contact privacy@messagesync.ai.
You provide consent for each transfer by clicking Transfer. You can withdraw consent and stop all processing by the Extension at any time by:
The Extension transmits the session only to your own MessageSync account. Where that involves processing in a country other than your own, appropriate safeguards (such as Standard Contractual Clauses or other legally recognized mechanisms) are applied by MessageSync, as described in the MessageSync Privacy Policy.
The Extension integrates with no third-party analytics, advertising, or tracking services and includes no third-party SDKs for those purposes. WhatsApp is a service of Meta Platforms, Inc.; your use of WhatsApp Web is governed by WhatsApp’s own terms and privacy policy. This Extension is an independent tool and is not affiliated with, endorsed by, or sponsored by WhatsApp or Meta.
The Extension is intended for business users aged 18 or older and is not directed to children. We do not knowingly collect information from children.
The Extension’s use of information received from its permissions and from user data adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically, information the Extension accesses is:
We certify that the Extension’s collection and use of user data complies with the Chrome Web Store Developer Program Policies, and that our data practices are accurately and fully disclosed in this Privacy Policy and in the Extension’s Chrome Web Store privacy disclosures.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and posting the revised policy at this URL. Your continued use of the Extension after an update constitutes acceptance of the revised policy.
Questions or requests about this policy or the Extension’s data practices:
© 2026 HN30 LLP. WhatsApp Session Linker is a product of MessageSync.ai. “WhatsApp” is a trademark of Meta Platforms, Inc.; this Extension is an independent tool and is not affiliated with Meta.