Privacy and data handling

The core value of Bookmark.new is to run AI summarization and embedding steps in your web browser, on your device, so that processing does not go to third-party cloud AI APIs.

We store your bookmark library on our servers (URL, title, scraped page text, summaries, tags, and embedding vectors) so you can sync across sessions and devices. AI inference stays on your device — we do not send page text to OpenAI, Anthropic, or similar services for summarization.

Your account, authentication session, and bookmark records live in our database. That includes the URL, title, optional summary text, tags, favicon and preview metadata, and embedding vectors we need for search—scoped to your account. We do not use your content to train public models; this is a private library product.

Paid plans are processed with Stripe. We receive billing and subscription state from Stripe (such as your subscription status and renewal dates) to unlock Pro features. We do not use Stripe to process the full text of the pages you bookmark.

The optional Bookmark.new Chrome extension (also described at https://www.bookmark.new/chrome-extension) talks only to https://www.bookmark.new (or your configured app origin). It uses your existing signed-in session cookies to save the current tab, look up whether a URL is already saved, search your library (omnibox / related ranking), and show related bookmarks. When you open the related overlay, the extension may read the page title, meta description, selected text, and a short excerpt from the active tab so ranking can run against your private library. Failed saves may be queued locally in the extension until the network is available again.

Opt-in "auto-show related" requests permission to access websites you visit so the overlay can appear after navigation when there is a match. You can turn this off in the extension Options page; the broader host permission is removed when you disable it. The extension does not sell browsing data and does not send page text to third-party AI APIs.

Sign-in and related identity flows go through the auth stack configured for https://www.bookmark.new. Standard security practices apply (for example secure cookies in production, HTTPS, and the identity provider you choose where applicable).