Privacy Policy for BookmarkIt Chrome Extension

Last Updated:

1. Introduction

BookmarkIt ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the BookmarkIt Chrome extension.

2. Information We Collect

2.1 Authentication Information

When you sign in using Google OAuth, we collect:

• Your Google account email address
• Your name (if provided by Google)
• Your Google user ID

This information is collected through Google's OAuth service and is necessary to authenticate you and provide personalized bookmark management.

2.2 Bookmark Data

We collect and store the following bookmark information that you create:

• Bookmark titles
• Bookmark URLs
• Bookmark descriptions (if provided)
• Folder names and organization structure
• Creation and modification timestamps

2.3 Technical Information

The extension may collect minimal technical information necessary for functionality:

• Current tab URL (only when you choose to bookmark a page)
• Extension usage data stored locally in your browser

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to your bookmarks
• Bookmark Management: To store, organize, and sync your bookmarks across devices
• Service Functionality: To enable core features like creating, editing, deleting, and organizing bookmarks
• Data Synchronization: To sync your bookmarks across all devices where you use the extension

4. Data Storage and Security

4.1 Data Storage

Your bookmark data is stored securely in Supabase, a cloud database service. All data is encrypted in transit and at rest. Your authentication credentials are managed by Google OAuth and Supabase Auth services.

4.2 Local Storage

Some data may be cached locally in your browser's storage for offline access and improved performance. This cached data is stored on your device and is not transmitted to third parties.

4.3 Security Measures

We implement the following security measures:

• Row-Level Security (RLS) policies ensure users can only access their own data
• All data transmission is encrypted using HTTPS/TLS
• Authentication is handled through secure OAuth 2.0 flows
• Database access is restricted through secure API keys

5. Third-Party Services

We use the following third-party services:

5.1 Google OAuth

We use Google OAuth for user authentication. When you sign in, Google processes your authentication request according to Google's Privacy Policy.

5.2 Supabase

We use Supabase as our backend database and authentication service. Your data is stored on Supabase's infrastructure, which complies with industry-standard security practices. For more information, see Supabase's Privacy Policy.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may disclose your information only in the following circumstances:

• Service Providers: We share data with Supabase and Google as necessary to provide the service
• Legal Requirements: If required by law or in response to valid legal requests
• Protection of Rights: To protect our rights, privacy, safety, or property

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can access all your bookmark data through the extension interface
• Deletion: You can delete individual bookmarks, folders, or all your data at any time through the extension
• Export: You can export your bookmarks as CSV or JSON files
• Account Deletion: You can sign out and request account deletion by contacting us
• Data Portability: You can export your data at any time using the export feature

8. Data Retention

We retain your bookmark data for as long as your account is active. If you delete your account or request data deletion, we will remove your data from our systems within 30 days, except where we are required to retain it for legal purposes.

9. Children's Privacy

BookmarkIt is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically.

11. International Data Transfers

Your data may be stored and processed in servers located outside your country of residence. By using BookmarkIt, you consent to the transfer of your data to these servers, which may be located in different jurisdictions.

12. Contact Us

13. Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Chrome Web Store Developer Program Policies

© BookmarkIt. All rights reserved.