BookmarkForge logo BookmarkForge

Last Updated: September 13, 2026

Privacy Policy

1. Data Controller

The data controller for the processing described in this policy is BookmarkForge, operated by Leonardo (Castrelos, Vigo, Spain). Privacy questions and data subject requests: bookmarkforge@proton.me (see section 17). For a self-hosted companion server, the operator of that deployment acts as controller of the data processed by that server.

2. Introduction & Scope

BookmarkForge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use our application.

Key Principle: BookmarkForge runs 100% locally on your device. Your bookmarks, notes, documents, and AI conversations are stored in your browser's local database and are never transmitted to our servers.

3. Data We Do NOT Collect

We want to be clear about what we do not collect:

4. Where Your Data Lives

All your data is stored locally in your browser using:

Your data never leaves your device unless you explicitly:

5. Encryption

Your data is encrypted using:

We do not have access to your encryption keys or passwords.

6. Content Security Policy (CSP) Reports

BookmarkForge uses Content Security Policy (CSP) headers to prevent cross-site scripting and data injection attacks. If your browser blocks a resource because of these headers, it automatically sends a brief technical violation report to the same origin that served the application (the /csp-report endpoint). The operator's collector keeps only:

This is standard browser behavior mandated by the CSP specification (the report-uri / Reporting-Endpoints headers): the browser sends these reports on its own, without any per-user opt-in, because they are part of the security machinery that protects you. No cookies, identifiers or browsing history are attached, and no vault content is ever included.

7. AI Providers

When you use AI features:

8. Optional Error Reporting (Opt-In Only, Local-Only)

You may choose to enable local error reporting in Settings. If enabled:

9. PWA Bookmarklet & Share Target

BookmarkForge offers two ways to save content from your browser:

Both methods only send the URL and page title to the app when you explicitly trigger them. No browsing activity is tracked.

10. Third-Party Services

These are the third parties that can be involved. Section 13 describes each one's role, the data it can receive and the transfer mechanism. Nothing below happens unless the corresponding feature is used.

11. Your Rights (GDPR / RGPD)

BookmarkForge is designed so that we never receive your personal data, which means most GDPR obligations fall away by design. Under the General Data Protection Regulation (GDPR), you retain the following rights:

To exercise any right that requires our involvement (e.g. a complaint about server-side processing), contact us at the email in section 17. You also have the right to lodge a complaint with your national data protection authority.

12. Lawful Basis & Processing Register

Under GDPR Article 6, we document the lawful basis for every processing activity that involves any data leaving your device:

Processing activityData involvedLawful basisRetention
Cloud AI (direct browser-to-provider) Your prompts, sent directly to the provider you selected Consent (Art. 6(1)(a)) -- opt-in per provider in Settings Not stored by us; provider policies apply
Pro license validation (Whop adapter) License key, instance/device identifier, IP for rate limiting Contract (Art. 6(1)(b)) -- required to deliver the paid feature Entitlement state while the license is active; rate-limit windows <= 1 hour
CSP violation reports Blocked resource origin, violated directive, page origin, salted one-way IP hash for rate limiting Legitimate interest (Art. 6(1)(f)) -- browser-mandated security reporting; see Section 6 Bounded in-memory ring (<= 200 reports) or JSONL file you host
Opt-in business analytics -- self-hosted companion server only; the hosted service at bookmarkforgeapp.com does not operate this endpoint Daily aggregated counts of a fixed list of event types, plus a SHA-256 hash of a random per-install id; no content, URLs, titles or timestamps Consent (Art. 6(1)(a)) -- off by default <= 180 days of daily totals; <= 200,000 installs of bounded per-install state
Client degradation events -- self-hosted companion server only; not operated on the hosted deployment Anonymized technical error class, hashed IP with per-deployment salt Consent (Art. 6(1)(a)) Bounded ring (<= 200 events), aggregation window <= 10 minutes
P2P sync signaling Peer connection metadata (SDP/ICE), ephemeral room secret Contract (Art. 6(1)(b)) -- you initiated the sync Connection lifetime only; no persistence after disconnect

Everything else -- your bookmarks, notes, documents, passwords, encryption keys, analytics events -- is processed exclusively on your device under your control, and is therefore outside the scope of GDPR processing by us.

13. Third-Party Processors & Data Transfers

When you use optional features, data may be processed by the following third parties (sub-processors). Each transfer happens only when you explicitly use the feature:

We do not sell, rent, or share your data for advertising. We operate no analytics of any kind -- no page-view counters, no event pipelines, no device fingerprinting, no third-party analytics scripts, and no analytics endpoint exists to opt into. You can verify this yourself: open your browser's network inspector on bookmarkforgeapp.com and the only requests are to this domain, the AI or storage providers you configure, and Whop at checkout. Cloud providers are bound by their own GDPR-compliant data processing agreements; we recommend reviewing them before enabling cloud AI.

International transfers: when a provider processes data outside the EEA, transfers rely on the provider's EU adequacy decision or Standard Contractual Clauses. Local-only use of BookmarkForge involves no international transfer at all.

14. Record of Processing Activities (ROPA summary)

A summarized record of processing activities (GDPR Art. 30) is maintained covering: purposes, categories of data subjects (app users, paying customers), categories of personal data (license keys, hashed IPs, opt-in technical reports), recipients (the processors above), retention limits, and security measures (client-side AES-256-GCM encryption, TLS 1.3 in transit, HMAC-signed signaling, rate limiting).

15. Children's Privacy

BookmarkForge is not designed for children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect any personal information from anyone.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date above and, for breaking changes affecting processing, announced in-app before they take effect.

17. Contact

For privacy questions, data subject requests, or concerns:

Terms of Service

Last Updated: September 13, 2026

1. Acceptance of Terms

By using BookmarkForge, you agree to these Terms of Service. If you do not agree, do not use the application.

2. Description of Service

BookmarkForge is a local-first knowledge management application that allows you to:

3. Pricing & Licenses — Lifetime of v1 (No Subscriptions)

Individual licenses are sold as Lifetime for a major version — pay once, own v1 forever. No monthly billing. Refunds: 30 days via Whop. Payments handled by Whop (card, PayPal, crypto; we never see card data).

4. Support SLA

Single maintainer. The vault is encrypted — we cannot see your data and we never ask for your vault password or 24-word recovery phrase.

5. Local-First Nature

You understand and agree that:

6. User Responsibilities

You agree to:

7. AI Features

When using AI features:

8. Limitation of Liability

BookmarkForge is provided "as is" without warranties of any kind. We are not liable for:

9. Intellectual Property

10. Termination

Since BookmarkForge runs locally, there is no account to terminate. You can stop using the application at any time by closing your browser.

11. Governing Law

These terms are governed by applicable laws. Any disputes shall be resolved in the appropriate courts.

12. Contact

For questions about these terms: