Privacy

What we never collect

No accounts, no analytics, no tracking, no advertising, and no collection of bookmark content. There is no server that receives your bookmarks, and there is nothing to opt out of.

Where your data lives

Browser source: bookmarks stay in your browser's own bookmark store and are read or changed only through its built-in APIs.

Vault daemon: bookmarks are Markdown files in a folder you choose on your own disk. The daemon serves them to the extension over 127.0.0.1 / localhost only. Nothing is uploaded.

Standalone source (legacy): the collection lives in a database inside your browser profile (IndexedDB) and never leaves it. It is retiring over one major version; migration to a vault is an explicit copy that leaves the legacy data intact.

Network requests the extension makes

One kind only, by default: favicon lookups against Google's public favicon service. Bookmark origins (the scheme and host) are sent to find site icons; full URL paths are not.

Icons are looked up in this order, and each step that answers stops the next from running: a local cache of icon bytes stored on your machine, then the browser's own on-device icon store (Chrome's favicon API; Firefox has no equivalent an extension may read), then Google, then a letter placeholder drawn locally. The one exception is the grid view: the browser's store only holds small icons, so a grid tile asks Google before the browser's store. A successful lookup is cached for 30 days, so a given site is normally asked about once a month rather than on every new tab, and cached icons keep working offline.

If you connect a local daemon, the extension talks to that loopback address. Permission is requested at connect time, never at install time.

This website

This site is static HTML and CSS served from GitHub Pages, with a few small scripts for the dark-mode toggle, copy buttons and the live preview. It embeds no analytics, sets no cookies, loads no third-party scripts, and serves its own fonts.

The live demo at /preview/ runs the real app against seeded demo bookmarks when you visit that page; no other page on this site loads the app. It uses the same public favicon service as the extension to show real site icons, and only the fixed demo origins are ever requested — none of your own bookmarks are involved. Docs search runs in your browser against an index served from this site, with no external search service.

Your dark-mode preference is stored in your browser's localStorage and nowhere else.

Permissions, briefly

Chrome: bookmarks, storage, activeTab, favicon and clipboardWrite.

Firefox: bookmarks, storage and activeTab.

Safari: activeTab and storage. Safari uses the local daemon source because browser bookmarks are not available to extensions there.

Optional localhost permissions appear only when you connect a daemon.

Questions

The source code is public: audit it at github.com/farhadeidi/bookmarks-but-better, and open an issue there if anything here looks wrong.