Your data, explained.

Privacy Policy

Effective October 23, 2026. This policy covers the Basic Bookmark website and browser extensions. Contact support@basicbookmark.com with privacy questions or requests.

Information and purposes

We receive your name, email address and sign-in password. Passwords are stored as hashes. We store account identifiers, hashed session tokens, email verification records and security records used to limit abusive requests. Hosting and email providers process request and delivery information, including IP addresses, to operate the service and send account emails.

Your library contains bookmark URLs, titles, descriptions, folders, Bookmarks Bar entries and profile details. We use this information to save, organize and sync your library, authenticate you, deliver account emails and protect the service.

Optional encryption

Standard mode is the default: library content and display names are readable by the service and stored in a readable local cache. Optional end-to-end encryption encrypts your library and display name on your device before upload. Your separate vault password and recovery key are not uploaded. Without either, we cannot recover encrypted content.

Email, account identifiers, authentication records, sync versions, ciphertext size and network metadata remain outside the vault. Unlocked applications can read your library. Turning encryption off uploads readable content. Encryption does not retroactively protect historical backups or exports. Connections to our service use HTTPS.

Browser data and local storage

Save current tab reads the page URL and title when you choose that action. The extension does not monitor browsing history or read page bodies in the background. Optional bookmark permission lets it locate the browser Bookmarks Bar and copy your selected Bar entries while protecting unrelated entries. Unrelated browser bookmarks are not uploaded.

Native bookmark copies are readable to your browser and any browser sync service you enable. Copies remain after locking, signing out or stopping sync. Standard mode may request favicons from saved websites, exposing normal request information, including your IP address, to those sites. Automatic favicon requests are disabled in encrypted mode. Opening a bookmark contacts its destination.

The website uses a sign-in cookie. Extensions store a login token in extension storage when you choose to stay signed in, or in browser-session memory otherwise. While an extension sign-in is unfinished, its email and password may be kept in browser-session memory for up to five minutes so they can be restored after the popup closes; they are cleared after sign-in or when the browser closes. Library caches, preferences and sync information are stored locally. Encrypted mode encrypts the library cache; unlocked keys stay in active application memory. Unsynced changes may remain after sign-out for recovery after signing in again.

If you enable authenticator-based two-factor authentication, we store your authenticator secret encrypted on our server and hashes of your one-use recovery codes. Password reset links expire and are single-use; two-factor accounts also require an authenticator or recovery code when resetting the sign-in password.

Sharing and Limited Use

Basic Bookmark complies with the Chrome Web Store User Data Policy, including its Limited Use requirements, when using data received through Chrome APIs. Browser data is used only to provide or improve the bookmark features described here. We do not sell personal data, use it for advertising, or transfer it for creditworthiness or lending decisions. The browser extensions do not include analytics.

The website uses Google Analytics to understand website usage. Google may receive device and browser information, page paths, approximate location derived from IP addresses, and analytics identifiers stored in cookies. We configure page addresses without query strings or fragments, and do not load analytics on password-reset links. Google processes this information under its privacy policy.

Data is shared with providers for hosting, email delivery and website analytics, at your direction, or as required by law or necessary for security. Human access to browser-derived data is limited to your affirmative consent for a specific purpose, security needs or legal requirements. We do not share data with unrelated parties for their marketing.

Retention and controls

Live account and library data remain until deleted. Account settings let you edit your profile, export bookmarks, purge your library or delete your account. Deletion removes the live account, workspace and sessions. Purge keeps your account and profile. Uninstalling an extension does not delete your server account or native bookmark copies. Exported files remain wherever you save them.

Sessions expire after 30 days. Expired sessions and rate-limit records older than one day are cleaned when creating sessions. Verification codes expire after 10 minutes; expiry does not necessarily immediately delete their records. Hosting logs and backups follow separate provider retention settings and may retain deleted data temporarily. Contact us for details about those settings or help accessing or deleting your information.

Contact and changes

Email support@basicbookmark.com from your account email for access, correction or deletion requests. We may verify account ownership. Changes will be posted here with an updated effective date.