Privacy policy
Last updated 2026-10-09
The short version. Bookmark Hero runs in your browser and keeps your library there. We do not run a server that receives, stores, or can see your saved items, searches, tags, notes, or folders. The only thing of yours that ever reaches us is what is needed to sell and verify a paid licence, and that is listed below.
What the extension does
It collects the items you save on sites you enable (bookmarks and likes on X, saved posts, comments, and upvotes on Reddit, starred repositories on GitHub) into a searchable library stored in your browser.
Where your data lives
Everything the extension collects is stored in your browser’s extension storage on your device. Removing the extension deletes it. You can export all of it at any time from Settings → Storage in open formats (JSON, CSV, Markdown, and a bookmarks file).
What the extension sends, and to whom
- To the sites you enable. The same requests those sites’ own pages make, using the session your browser already has, to read your saved items. When the matching options are on this includes one request per saved item to fetch what surrounds it (the author’s thread on X, the parent post of a saved Reddit comment, a repository’s README on GitHub), and periodic re-checks of items you saved earlier so the shelf can tell you when something disappeared. Nothing is written to those sites, and nothing is fetched about items you did not save.
- Instant capture (paid tier). On enabled sites the extension watches the requests the page itself sends when you click the site’s own Save, Bookmark, Like, Upvote, or Star button, so the item lands on your shelf at once. Only requests to those sites’ save endpoints are inspected, only after the site accepted them, and only while the feature is on. The request is read for the item’s id inside the extension and discarded; its contents are never stored or sent anywhere. No other page traffic is observed.
- To those sites’ media servers. Requests for images and videos in your saved items, if media caching is on.
- To an AI provider, only if you configure one. The provider you choose receives the text of saved items so it can tag, file, and summarise them. For a local server on your machine, every enabled site is included; for a cloud provider, only the sites you explicitly allow. We are not a party to that traffic and never see it. The provider’s own privacy policy applies to it.
- To our licensing service, only if you activate a paid licence. It receives your licence key or a refresh secret, a random install id, your browser platform, and the extension version, so it can verify the subscription and limit the number of devices. It never receives any saved item, URL, search, tag, note, or folder.
The licensing service
The service that issues and checks paid licences stores the minimum needed to do that: your email address and customer id as provided by Stripe, your plan and its status, a hash of your licence key (not the key itself), and an anonymous install id and platform for each browser you activate. It keeps no content from your library because it never receives any. When you deactivate a device its install id is removed. If you ask us to delete your licence record, we will.
Payments
Purchases are handled by Stripe. Stripe collects your payment details under its own privacy policy; we never see card numbers. Stripe tells us your email address and whether your subscription is active so we can issue and manage your licence.
We email you only in two cases: the licence key after a purchase, and a replacement key if you ask for one through the “Lost your key?” page. When email delivery is configured it goes through Resend, a transactional email provider; we send no newsletters and no marketing.
What we do not do
- No analytics or telemetry in the extension.
- No analytics, cookies, or trackers on this website.
- No advertising, and no selling or sharing of data with anyone.
- No account beyond the licence key for paid features. The free extension needs nothing from you.
Your control
Switching a site off in Settings releases the extension’s access to it. The paid features can be turned off individually. Export covers everything, and removing the extension deletes all local data.
Changes
If this policy changes, the date at the top changes with it and the current version is always at this address.
Contact
Questions about privacy: axorasoftwarellc@protonmail.com.