Privacy Policy
Last updated August 20, 2026
Bookmark Brain is a product of Valitura, LLC ("Valitura," "we," "us," or "our"). This Privacy Policy explains what data we collect through bookmarkbrain.site and the Bookmark Brain Chrome extension (together, the "Service"), why we collect it, and the choices you have.
1. What we collect
Account information — your email address, and either a hashed password (we never store your password itself — it's hashed with scrypt, a one-way function) or, if you sign in with Google, your Google account's email, name, and profile picture.
Your bookmarks — the URLs, titles, and folder paths you save or import, plus content we fetch from those pages (page title, description, and text) so it can be searched, along with the embeddings computed from that content.
Billing information — Stripe handles your payment details directly; we never see or store your card number. We keep your Stripe customer/subscription IDs and subscription status.
Technical & security data — your IP address (used for rate-limiting sign-in attempts against abuse), session tokens, and basic request logs.
2. How we use it
- To provide the Service — storing and searching your bookmarks, computing embeddings, generating clusters, and running the browser extension;
- To process payments and manage your subscription;
- To protect the Service — rate-limiting and fraud/abuse prevention;
- To send account-related email — password resets always, and a weekly digest if you have it turned on (it's on by default but can be switched off anytime from your account or the unsubscribe link in the email itself);
- To respond when you contact support.
3. Who we share it with
We don't sell your data. We share it only with the service providers we use to run Bookmark Brain, each acting on our behalf and only for that purpose:
- Stripe — payment processing and subscription billing.
- OpenAI and/or Google (Gemini) — whichever embedding provider is active receives the text content of your bookmarks in order to compute embeddings that power semantic search. If you use the fully offline/local mode, your content isn't sent to either.
- Google — if you use "Sign in with Google," Google authenticates you and shares your basic profile info with us.
- Resend — delivers our transactional email (password resets, the weekly digest).
- Supabase and Hostinger — our database and application hosting providers.
We may also disclose information if required by law, or to protect the rights, safety, or property of Valitura, LLC or our users.
4. Cookies
Bookmark Brain doesn't use tracking, advertising, or analytics cookies. Signing in uses a Bearer token stored in your browser's local storage, not a cookie. The one exception is a short-lived (5-minute), strictly-necessary cookie set only during the "Sign in with Google" flow, used to protect against cross-site request forgery — it's deleted automatically once sign-in completes and contains no personal data.
5. Data retention & deletion
We keep your data for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing [email protected] — deleting your account removes your bookmarks, clusters, and account information from our database.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing (for example, under the GDPR if you're in the EU/UK, or the CCPA if you're a California resident). You can exercise these by emailing [email protected]; we'll respond within a reasonable time.
7. Security
We use industry-standard measures to protect your data — passwords are hashed (never stored in plain text), connections to the Service are encrypted (HTTPS), and payment details are handled entirely by Stripe rather than passing through our servers. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.
8. Children's privacy
The Service isn't directed at children under 16, and we don't knowingly collect personal data from them.
9. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll post the updated policy here with a new "Last updated" date.
10. Contact
Questions about this policy or your data? Reach us at [email protected].