Privacy Policy

What is stored locally

All extension data is stored exclusively in your browser's local IndexedDB database:

• Bookmarks — URLs, titles, and captured page content
• Extracted content — Readable Markdown converted from page HTML
• Q&A pairs — AI-generated question-answer pairs with vector embeddings
• Tags — Your organizational tags for bookmarks
• Search history — Your search queries (stored only locally)
• Settings — Your API configuration and preferences

This data never leaves your browser unless you explicitly configure external services (see below).

AI API (User-configured)

To generate Q&A pairs and embeddings, the extension sends requests to an AI API endpoint that you configure. By default, this is set to OpenAI's API, but you can change it to any OpenAI-compatible endpoint.

What is sent: Only the extracted Markdown content of bookmarked pages. Full HTML, URLs, and your browsing history are never sent.

Privacy option: For maximum privacy, you can configure the extension to use a local AI model (via vLLM, llama.cpp, Ollama, or similar) so no data ever leaves your machine.

Server Sync (Optional, self-hosted)

You can optionally run a self-hosted sync server for multi-device access. This is entirely optional and disabled by default.

What is sent: Your bookmark collection including URLs, titles, content, and metadata.

Authentication: Uses token-based authentication. A locally generated token is hashed server-side to identify your account.

Your control: You host the server, you control the data. We provide the server code; you run it on your own infrastructure.

• No analytics — We don't use Google Analytics, Mixpanel, or any tracking service
• No telemetry — We don't collect usage data, crash reports, or diagnostics
• No tracking — No cookies, pixels, or fingerprinting
• No accounts with us — Server sync is self-hosted; we don't operate any servers
• No server-side storage — We don't operate servers that store your data
• No selling data — We have no data to sell

The standalone web version operates the same as the extension but requires a self-hosted server for content fetching, since browsers restrict cross-origin requests from web pages. No third-party proxies are used.

The browser extension requests only the permissions necessary to function:

• Active Tab — To capture the current page when you click "Save"
• Storage — To store your bookmarks locally
• Alarms — To schedule background sync operations

The extension cannot access your browsing history, other tabs, or any data you don't explicitly save.

You have complete control over your data:

• Export — Download all your bookmarks as JSON at any time
• Delete — Remove individual bookmarks or clear all data
• API choice — Use any OpenAI-compatible API, including local models
• Sync choice — Optionally enable server sync to your own self-hosted server

This extension is open source. You can review the code yourself:

github.com/longregen/bookmarks

The code does exactly what this policy describes — nothing more.

For privacy questions or concerns, open an issue on GitHub or reach out via localforge.org.