Privacy Policy

Last updated: February 2026

BruteBookmarks is a bookmark manager built by an independent developer. This policy explains what data the extension and web app collect, how it's used, and how you can control it.

What We Collect

When used locally (no account):

Bookmark URLs, titles, and category names — stored in your browser's local storage.
Display preferences (theme, accent color, card size) — stored in your browser's local storage.
Nothing is transmitted. Your data stays on your device.

When signed in (sync enabled):

Bookmark URLs, titles, category names, and organizational structure — transmitted to and stored on Convex Cloud (our real-time backend).
Authentication data (email, name, profile picture) — handled by Clerk, our authentication provider.
Display preferences — synced via Convex Cloud.

When importing Chrome bookmarks:

The extension reads your Chrome bookmark tree only when you explicitly trigger an import. This data is processed locally and sent to Convex Cloud only if you are signed in.

How We Use Your Data

To display and organize your bookmarks.
To sync bookmarks across your devices when you're signed in.
That's it. We have no other use for your data.

What We Don't Do

We don't serve ads.
We don't track your browsing activity.
We don't analyze your bookmark content.
We don't sell, share, or license your data to any third party for marketing, advertising, or profiling purposes.
We don't use your data to train machine learning models.

Third-Party Services

Convex (convex.dev) — Real-time database and backend. Stores your bookmarks and preferences when signed in. Data is transmitted over encrypted HTTPS/WSS connections. Convex privacy policy.
Clerk (clerk.com) — Authentication provider. Handles sign-in, session management, and account security. Clerk privacy policy.
Favicon services (Icon Horse, DuckDuckGo, Google) — Used to fetch website icons. Only the domain name is sent; no user identity or bookmark data is attached.
Wikimedia Commons — Image search for bookmark icons. Search queries are sent to the Wikimedia API. No user identification is attached.

No other third-party services receive your data.

Data Retention

Your data is stored as long as your account exists. Local-only data persists until you clear your browser data or use the in-app "Erase" function.

Data Deletion

Local data: Use the "Erase" button in Settings, or clear your browser's local storage.
Synced data: Use the "Erase" button in Settings while signed in. This deletes all your bookmarks and categories from Convex Cloud.
Account deletion: Contact contact@brutebookmarks.com to request full account removal from both Clerk and Convex.

Your Rights

You can export all your data as a JSON file at any time via Settings > Export. You can delete all your data at any time via Settings > Erase.

Changes to This Policy

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.

Contact

For privacy questions or data requests:
contact@brutebookmarks.com