Privacy policy

Last updated October 27, 2026

Who we are

BookmarkWarden is a browser extension and sync service available at bookmarkwarden.com. In this policy "we" means the people who run it. You can reach us at privacy@bookmarkwarden.com.

What stays on your device

The extension reads and changes your browser's bookmarks to keep them in sync. On your device it also keeps your encryption key (if you choose "Remember this device"), a record of what was last synced, backups of your bookmarks, tabs other browsers sent you, and the name you give the browser. This stays in your browser's extension storage and isn't sent to us, except in encrypted form as described below. Locking the extension removes the key; uninstalling it removes everything.

What we store on our server

When you sign in, your username and password are turned into an encryption key and a file ID on your device. Only encrypted files, each stored under an ID that's derived from your key, reach the server:

• Your bookmarks: titles, addresses and folders.
• Your browser list: each signed-in browser's type and operating system (for example "Chrome on Windows 11"), the name you gave it, and when it last synced.
• Sent tabs: the page address and title, until the receiving browser picks them up.
• Your recovery code file, if you create one: your account's credentials, encrypted with the recovery code, which only you have.

All of this is encrypted with AES-256-GCM before it leaves your device. We don't have the keys and can't decrypt it. For each file we can see only its ID, its size, and when it was last changed.

Information about your connection

Like any website, our server receives your IP address with each request. We use it only to limit how often one address can make requests and create new files, to prevent abuse. For the daily limit on new files we store a one-way hash of your IP address combined with the date, which is deleted the next day. We don't keep request logs.

The service runs on Cloudflare (Cloudflare Workers and D1), which processes these requests on our behalf. See Cloudflare's privacy policy.

How long we keep it

Your encrypted files stay on the server until you delete them. In the extension, open Settings → Delete synced data: every file belonging to your account is removed immediately. We then keep a note that those file IDs were deleted (with no content), so your other browsers know to stop syncing, for up to one year.

If you forget your password and have no recovery code, neither you nor we can open or identify your files. Contact us if you'd like help removing them.

What we don't do

• We don't use cookies, analytics or advertising, in the extension or on this website.
• We don't sell, rent or share your data, and we can't read it to do so.
• We don't ask for your name, email address or phone number.

Extension permissions

• Bookmarks: to read and update your bookmarks when syncing.
• Storage: to keep your settings, backups and sync state on your device.
• Access to api.bookmarkwarden.com: to upload and download your encrypted files. If you use your own server, the extension asks for access to that address instead.
• Notifications, context menus and the active tab: to send the page you're on to another browser and tell you when one arrives.
• Alarms: to sync in the background every few minutes.

Children

BookmarkWarden isn't directed at children under 13, and we don't knowingly collect information from them.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data. Because your data is encrypted with keys only you hold, the extension itself is the way to see, change or delete it. For anything else, email privacy@bookmarkwarden.com.

Changes

If we change this policy, we'll update the date at the top of this page. Significant changes will also be noted in the extension's release notes.