Privacy Policy

Last updated: 2026-01-28

Privacy Policy for BookmarkHub

Effective Date: January 28, 2026

1. Introduction

BookmarkHub ("we," "us," or "our") operates the BookmarkHub browser extension (the "Service"). Our Service is designed to help users synchronize their browser bookmarks to their personal storage providers (such as GitHub or WebDAV).

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect and Use

We practice data minimization. We only process data that is strictly necessary for the extension's core functionality, payment processing, and service notifications.

A. Core Functionality Data (Bookmarks & Credentials)

  • Bookmark Data: The extension accesses your browser's bookmark tree (titles, URLs, folder structure) solely to convert and upload them to your configured storage provider (GitHub or WebDAV), or to download and merge updates to your browser.
    • Important: Your bookmark data is transferred directly from your browser to your chosen storage provider. We do not send your bookmarks to our own servers, nor do we analyze, sell, or mine your bookmark content.
  • Authentication Credentials: To connect to GitHub or WebDAV, you must provide Personal Access Tokens or passwords.
    • Storage: These credentials are stored locally on your device using chrome.storage.local. They are never transmitted to us or any third party other than the specific service you are authenticating with.

B. Account and Payment Information

  • Email Address: We may collect your email address via Resend to send you login verification codes, payment receipts, or critical service announcements.
  • Payment Data: We use Creem as our payment processor for premium subscriptions.
    • Security: All payment transactions are handled entirely by Creem. We do not collect, store, or process your credit card numbers or banking information.

C. Usage and Technical Data

  • Analytics: We use Google Analytics to collect anonymous usage statistics (e.g., button clicks, error rates, browser version). This helps us identify bugs and improve performance. This data is aggregated and does not contain Personal Identifiable Information (PII).

3. Third-Party Services

We utilize the following third-party service providers to operate our Service. Each has its own privacy policy:

  1. User-Defined Storage (GitHub / WebDAV Providers)
    • Purpose: To store your synchronized bookmarks.
    • Privacy: Subject to the privacy policy of the platform you choose (e.g., GitHub). You retain full ownership and control of your data on these platforms.
  2. Google Analytics (Google LLC)
  3. Creem
    • Purpose: Payment and subscription management.
    • Policy: Please refer to Creem's official Privacy Policy.
  4. Resend

4. Permissions Usage

We request the following permissions in the manifest.json file solely for the purposes listed below:

  • bookmarks: Required to read your local bookmarks for backup and to write/modify bookmarks during the synchronization process.
  • storage: Required to securely save your settings (e.g., sync interval, GitHub tokens) locally within your browser.
  • alarms: Required to schedule automatic background synchronizations.
  • host_permissions:
    • api.github.com: To communicate with the GitHub API for file operations.
    • *.google-analytics.com: To send anonymous usage reports.
    • [User Defined WebDAV URLs]: To connect to your private WebDAV server.

5. Data Security

  • Local Storage: Your tokens and configuration are stored within the browser's local storage environment. If you uninstall the extension, this data is automatically removed by the browser.
  • Encryption in Transit: All data transmission between the extension, your storage provider, and our third-party services is protected using industry-standard HTTPS/TLS encryption.

6. Your Rights

Depending on your location (e.g., GDPR for EU users, CCPA for CA users), you have the following rights:

  • Access and Control: You can view, modify, or delete your synchronized data directly on your GitHub repository or WebDAV server.
  • Opt-Out: You may opt out of anonymous tracking by disabling "Usage Statistics" in the extension settings (if applicable).
  • Data Deletion: Uninstalling the extension will remove all locally stored data. To request the deletion of your email from our notification list, please contact us.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Effective Date."

8. Contact Us

If you have any questions or suggestions about our Privacy Policy, please contact us at: