Disclosure: I built SaveShelf, and this post was drafted with AI assistance and edited by me.

A week ago I wrote about the sync loop in SaveShelf for Reddit, a Chrome extension that keeps a local library of your own saved posts and comments. This is the permission and privacy side, which is the part I would want to read before installing something that touches a Reddit session.

The permission list is short: storage, alarms, and host access to https://www.reddit.com/*. There is no tabs, cookies, or history permission. The library itself lives in IndexedDB in the browser, which does not need an extra permission. Settings and sync progress go in chrome.storage. Optional auto-sync uses chrome.alarms and is off until you turn it on.

The one unusual line in the install prompt is a content script on extensionpay.com. That is the payment library for the optional Pro unlock ($1.50 once, no subscription). It is not injected on reddit.com or on pages you are browsing. SaveShelf does not see your card details.

What the extension actually requests from Reddit is narrow: GET /api/me.json to learn the signed-in username, then GET /user/<name>/saved.json page by page. It uses the session already in Chrome, never asks for a Reddit password, and never writes back to Reddit. There is no SaveShelf server that receives the library, and this version has no analytics.

Limits I want to be upfront about: Reddit only exposes the latest ~1,000 saves, so that is all a first import can get. After that, new saves are kept locally even when Reddit stops listing them. The free plan holds 300 items, with search, tags, folders and JSON/CSV export included; nothing is deleted at the cap.

I'm the maker. If you see a permission or storage choice that looks wrong, I would like to hear it.

https://chromewebstore.google.com/detail/hefofgeogpjlajeijffmekoplniijgjf