Updated

Privacy policy

This policy covers Bookmark New Tab, Bookmark Everywhere, and the website and services at bookmark.nkson.com. Both extensions can display your bookmarks without an account. If you sign in to Bookmark Everywhere, it sends your bookmark library to the sync server you choose. Both extensions can request site icons even when you are signed out.

What stays in your browser

Both extensions read your browser’s bookmarks and keep a local copy for fast display and search. They store preferences such as your layout on your device. Search runs in your browser. Bookmark Everywhere uses access to the active tab to show the gallery when you open it. The extensions do not upload your browsing history or the contents of the page behind the gallery.

What sync sends

If you create a hosted sync account, we store your email address, a hash of your password, and account verification details. Bookmark Everywhere stores an API key in your browser to keep you signed in.

When you sign in, Bookmark Everywhere sends bookmark and folder data to your chosen server, including full bookmark URLs, titles, folder structure, order, and timestamps. It pulls changes from the server and applies them to your browser’s bookmarks. Bookmark New Tab does not sync on its own. The hosted API also stores browser and tab details if a client explicitly submits them through the API.

If you use a self-hosted or third-party sync server, that server’s operator controls the data you send to it. Changing your sync server does not change where the extensions request icons.

How site icons load

To display a site icon, the extension can send the hostname from a bookmarked URL (such as example.com) to the Bookmark icon service. It does not send the bookmark’s title, URL path, or query string in that request. If an icon is missing from the server cache, the service asks Logo.dev for it and caches the result.

Chrome Web Store Limited Use

Bookmark New Tab’s use of data received from Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Website and service providers

The website does not use advertising or analytics cookies. The service records technical request details for operation and troubleshooting. Logs can include request paths, status codes, timings, and the hostnames requested through the icon service. Hosting infrastructure may also log IP addresses.

  • Resend receives your email address and verification link to deliver your account verification email.
  • Sentry receives server error reports and diagnostic information to help us investigate problems.

Your choices and stored data

You can use either extension without signing in. Sign out of Bookmark Everywhere to stop sync in that browser. Signing out or uninstalling does not delete data already stored on the sync server. The service keeps account and sync data while your account exists, and may keep deletion records so changes can reach other browsers.

For privacy questions or to request access, correction, or deletion of data on the hosted service, email bookmark@nkson.com. If you use a separate sync server, contact its operator about the data stored there.