Privacy Policy
This policy explains what personal information bookmark.land collects, why, who we share it with, how long we keep it, and the choices and rights you have.
The short version
- We collect what we need to run your bookmark library: your account, the links you save, and what you write about them.
- We do not sell your personal information, share it for cross-context behavioural advertising, or show ads.
- We use product analytics (PostHog) to improve bookmark.land. Where the law requires consent, analytics stays off until you agree. We honour Global Privacy Control (GPC) everywhere.
- You can export or delete your data at any time from Settings, or ask us at [email protected] or through our privacy request form.
1. Who we are
bookmark.land is operated by Jinko LLC, d/b/a bookmark.land ("bookmark.land", "we", "us"), 212 Copper Square Drive, Bethel, CT 06801, United States. We are the controller of the personal information described in this policy.
Privacy contact: [email protected]. Our privacy contact is also the person in charge of the protection of personal information for the purposes of Quebec law.
This policy covers the bookmark.land website, web app, REST API and browser extension. The Browser Extension Privacy page gives extra detail on each extension permission.
2. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Name, email address, profile picture and account ID. If you sign in with Google, the name, email and picture from your Google profile. Passwords are handled by our sign-in provider; we never see them. | You, Google (if you choose Google sign-in), Clerk |
| Your library | Links you save and their titles, descriptions, notes, tags, collections, smart folders, highlights, favourites, files and images you upload, and bookmark files you import | You, directly or through the extension, API or import |
| Information about the pages you save | Page titles, descriptions, preview images, favicons, preview screenshots, readable page text for reader view, and whether a link still works | Fetched from the pages you save (see section 4) |
| Public collections | Collections you choose to make public, and their branding | You |
| Billing | Your plan, subscription status and history, and a customer reference. Card and payment details are collected and stored by Polar, our payment provider; we never receive them. | Polar |
| Education offer | Your .edu email address, used to check eligibility | You |
| Feedback and support | Your message, the page you were on, your browser's user agent and your email address | You |
| API | API tokens you create. We store only a cryptographic hash of each token, never the token itself. | You |
| Usage and device | Pages viewed, features used, clicks, device and browser type, and approximate location derived from your IP address (product analytics); session recordings of how you use the app, with text and form fields hidden, only if you choose Accept (section 5); IP address, browser user agent and request logs (security and operations) | Your browser, with consent where required (section 5); our hosting providers |
| Privacy records | Your cookie and analytics choices (with date, region and whether GPC was on), privacy requests you send us, and when you accepted our Terms and this policy | You |
We do not knowingly collect sensitive personal information, and we don't use any personal information to infer characteristics about you.
3. How we use it, and our legal bases
| Purpose | Information used | Legal basis (EEA/UK/Switzerland/Brazil) |
|---|---|---|
| Provide bookmark.land: store and sync your library, search, smart folders, public collections, the API and the extension | Account, library, page information, API | Performance of our contract with you |
| Fetch page details, screenshots and link-health checks for links you save | Your saved links | Performance of contract |
| Billing and the education offer | Billing, education offer | Performance of contract; legal obligation (tax and accounting records) |
| Answer feedback, support and privacy requests | Feedback, privacy records, account | Performance of contract; legal obligation (privacy requests) |
| Product analytics to understand and improve bookmark.land | Usage and device | Consent where required by law (for example in the EEA, UK, Quebec and Brazil); otherwise our legitimate interest in improving the service, which you can opt out of at any time |
| Keep bookmark.land secure and prevent abuse (rate limiting, bot protection, logs) | Usage and device, account | Legitimate interest in protecting our users and service |
| Record consent and privacy requests so we can prove we followed the law | Privacy records | Legal obligation |
| Send service emails (for example, request confirmations and important account or policy notices) | Account | Performance of contract; legal obligation |
We do not use your information for automated decision-making that has legal or similarly significant effects on you. We do not send marketing emails.
4. Fetching the pages you save
When you save a link, our servers visit that page to read its title, description and images, take a preview screenshot, and later check that the link still works. As part of this:
- the page's website receives a request from our servers, not from your browser;
- the website's hostname (for example
example.com, not the full link) may be sent to Google's favicon service to fetch its icon; - if our own screenshot service is unavailable, the link may be sent to thum.io to produce the screenshot.
Bookmarks in a collection you make public, including their titles, descriptions and notes, can be seen by anyone with the link to that collection until you make it private again.
5. Cookies and analytics
We use a small number of cookies and similar technologies. Some are strictly necessary for sign-in, security and remembering your privacy choices. One category, analytics (PostHog), is optional. Details, and how your region affects the defaults, are in our Cookie Policy. You can change your choice at any time from Cookie settings in the site footer or the Legal menu in the app.
When you're signed in and analytics is on, analytics events are linked to your account ID and email address so we can understand how the product is used.
Session recordings: if you choose Accept in the cookie banner or in Cookie settings, PostHog may record how you use the app: mouse movements, clicks, scrolling and page layout. We use this to find bugs and confusing screens. Recordings hide all text and everything typed into forms, so your bookmarks, notes, email address and API tokens are not captured. We never record unless you have explicitly accepted, even where analytics is otherwise on by default. Turning analytics off in Cookie settings stops recording immediately.
Global Privacy Control: if your browser sends a GPC signal, we treat it as a request to opt out of analytics, in every region, and we show that your opt-out request was honored. If you later turn analytics on yourself in Cookie settings, we follow that choice until you change it.
6. Who we share it with
We share personal information only with the service providers that run bookmark.land, under contracts that limit them to processing it on our behalf, and in the limited cases listed below.
| Provider | What they do for us | Location |
|---|---|---|
| Clerk | Sign-in and account management | United States |
| Convex | Database, file storage and back-end hosting | United States |
| Polar | Checkout, payments, subscriptions and sales tax, as merchant of record. Polar processes payment details under its own privacy policy. | United States / EU |
| PostHog | Product analytics (only when analytics is allowed) | United States |
| Cloudflare | Content delivery, security, bot protection and privacy-friendly performance measurement | Global network |
| Postmark | Sending and receiving email | United States |
| Website icons (receives the hostnames of pages you save) and Google sign-in if you choose it | United States | |
| thum.io | Fallback preview screenshots (receives the link) | United States |
| Hosting providers for our metadata and screenshot services | Fetching information about the pages you save | United States |
We may also disclose information:
- when the law requires it, or to respond to valid requests from public authorities;
- to protect the rights, safety and property of our users, the public or bookmark.land;
- in a business transfer (for example a merger or acquisition). We will tell you before your information becomes subject to a different privacy policy;
- with your consent, or when you ask us to (for example, by publishing a collection).
We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as defined by California law. We have not done so in the past 12 months.
7. International transfers
We are based in the United States, and most of our providers process data there. If you are in the EEA, UK or Switzerland, we rely on the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where a provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (and the UK Addendum) with appropriate safeguards. You can ask us for a copy of the relevant safeguards at [email protected].
8. How long we keep it
| Information | How long |
|---|---|
| Account and library | Until you delete them or your account. Items you move to Trash are permanently deleted after 30 days. |
| Deleted accounts | Delete account in Settings (or a deletion request to us) removes your library, settings, sign-in account and analytics profile from our live systems, and cancels any active subscription. Privacy records (consent records, privacy requests and acceptance records) are kept for the periods above. Copies in provider backups expire on the provider's backup schedule. |
| Billing records | As long as tax and accounting laws require (typically 7 years). Polar keeps its own records. |
| Product analytics | Up to 2 years, then deleted or aggregated |
| Session recordings | Up to 90 days |
| Security and request logs | Up to 90 days, unless needed to investigate a specific security incident or abuse |
| Consent records | 3 years after each choice |
| Privacy requests | 24 months after the request is closed |
| Terms and policy acceptance | For as long as you have an account, plus 3 years |
| Feedback and support messages | Up to 2 years |
Consent records, privacy requests and acceptance records are kept even after you delete your account, because we need them to show that we respected your choices.
9. Security
We use encryption in transit (HTTPS), access controls, hashed API tokens and providers with strong security programmes. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.
10. Your rights
Depending on where you live, you may have the right to:
- know and access the personal information we hold about you, and get a copy;
- correct inaccurate information;
- delete your information;
- port your information, meaning a copy in a machine-readable format (the Import & Export page already gives you your library);
- object to or restrict some processing, such as processing based on legitimate interest;
- withdraw consent at any time, for example by turning analytics off in Cookie settings. This doesn't affect processing that happened before;
- opt out of the sale of personal information, targeted advertising and profiling. We do none of these, but you can still send a request;
- appeal our decision on your request;
- not be discriminated against for using any of these rights.
How to make a request: use the privacy request form or email [email protected].
- If you're signed in when you use the form, your account confirms who you are. Otherwise we email you a confirmation link.
- We may ask for more information if we can't confirm your identity.
- You may use an authorised agent. We will ask for proof that you authorised them.
- We respond within one month in the EEA, UK and Switzerland, 15 days in Brazil, and 45 days in the United States. Where the law allows, we may extend this once and tell you why.
- Requests are free, unless they are manifestly unfounded or excessive.
Appeals (United States): if we decline your request, you can appeal within 45 days using the appeal link in our decision email, or by replying to that email. We will answer within the time your state's law requires. This varies by state, and some states allow an extension, which we'll tell you about. If you are not satisfied with the appeal, you can contact your state Attorney General.
Complaints: you can complain to your local data protection authority. In the EEA, see the list of authorities; in the UK, the ICO; in Brazil, the ANPD; in Quebec, the Commission d'accès à l'information. We'd appreciate the chance to resolve it with you first.
11. Additional information for U.S. residents
This section is our notice at collection and privacy policy disclosure under California and other U.S. state privacy laws.
- Categories collected in the past 12 months:
- identifiers (name, email, account ID, IP address)
- customer records (billing status)
- commercial information (plan and subscription history)
- internet or other electronic network activity (usage and device data)
- approximate geolocation (from IP address)
- other information you choose to store in your library
- Sources, purposes and recipients: as described in sections 2, 3 and 6. All disclosures are to service providers or processors for business purposes.
- Sale, sharing and targeted advertising: none (section 6).
- Sensitive personal information: we use account login credentials only to sign you in, and we don't use or disclose sensitive personal information for any other purpose.
- Opt-out preference signals: we process GPC as described in section 5.
- Retention: section 8.
12. Children
bookmark.land is not intended for anyone under 16, and we don't knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact [email protected] and we will delete it.
13. Changes to this policy
We review this policy at least once a year. If we make a material change, we will tell you by email or with a notice in the app before it takes effect, and ask for your agreement where the law requires it. The version and effective date are shown at the top of this page, and earlier versions are available on request.
14. Contact
- Email: [email protected]
- Form: bookmark.land/privacy/request
- Post: Jinko LLC, Attn: Privacy, 212 Copper Square Drive, Bethel, CT 06801, United States