bookmarker — Privacy Policy
Last updated 7 September 2026
bookmarker saves links you choose to save. This policy describes what is stored, where, and who can see it.
What the app stores
For each link you save (a “bork”), bookmarker stores the URL, a title, the name of the account or site that posted it, which platform it came from, a topic and tags, any note you write, a thumbnail image when one is available, the date you saved it, and how many times you have opened it.
Some sites hand out thumbnail links that stop working after a few days. When you are signed in and a save carries one of those, our server fetches that thumbnail once and keeps a copy so your library keeps looking right. The copy is stored alongside your other data and is deleted with your account.
Where it is stored
By default, on your device. If you never sign in, your library stays on your iPhone and we cannot see it.
If you sign in, your saved links and your email address are stored on our servers in the United States, so your library is backed up and available on your other devices. Access is restricted so only your account can read or write your data.
Your email address
Signing in is how we verify who you are. We store your email address for the sole purpose of identifying your account and sending you a one-time sign-in code. There is no password. We do not send marketing email.
What we do not do
- No advertising, and no advertising identifiers.
- No analytics or tracking SDKs in the iPhone app.
- No selling or sharing of your data with anyone.
- No tracking you across other apps or websites.
- No access to your contacts, photos, location, or microphone.
Automatic filing
bookmarker sorts saved links into topics. Almost all of that happens on your device, offline, by matching words in the title and address.
When that is not enough to place a link and you are signed in, the app may ask a language model instead. In that case the link’s address, its title, the account that posted it, and any tags you typed are sent to our server and from there to a language model provider acting on our behalf, which returns a suggested topic. That provider does not use the request to train models. Your notes and your email address are never sent. If you are signed out, this never happens.
The web app at bookmarker.lol works the same way: it files your link in your browser first, offline, and only asks a language model when that comes back with nothing and you are signed in. The same four things are sent, and nothing else.
The suggestion is only a suggestion: it is shown to you and you can change it before saving.
Library highlights
If you are signed in, the app can summarise what you have been saving lately. To do that, it sends the titles, topics and tags of up to 40 of your recent saves — never the links themselves, never your notes — to that same language model provider, which returns a short summary. This only runs inside the app for you; the result is not stored on our server and is not visible to anyone else. Signed out, this feature is off.
Shared collections
You can group some of your saves into a collection and turn on a link for it. Until you do, a collection is private and nothing about it is visible to anyone else.
While the link is on, anyone who has it can open a page showing, for each bork you put in the collection: its link, its title, the account or site that posted it, its cover image and the topic it is filed under — plus the collection’s name, the note you wrote on it, and your display name. Nothing else. The page never shows your email address, the rest of your library, or the private notes you have written on those saves. It is not listed anywhere on bookmarker and asks search engines not to index it: the link is the only way to it, and it is not guessable.
People who open a shared page are not identified and are not asked to sign in. We record that the page was opened and how many items it had, so we know whether shared links are being used at all; no account, no profile and no cross-site tracking. The links on the page open the original post on the platform that hosts it, exactly as any other link would.
You can also give a link a time limit when you make it — one day or ten — and the page closes itself when that passes. Turning the link off, or deleting the collection, takes the page down within about a minute. If someone has already saved a copy of those links into their own library, that copy is theirs and stays with them — as it would if you had sent them the links in a message.
Requests to other websites
When you save a link, the app may request that page directly from your device to read its title and preview image. That website therefore receives an ordinary web request from your device, as it would if you opened the link in a browser. bookmarker does not tell those sites who you are.
If you are signed in, our server may make the same kind of request — to read a page’s title and preview image, or to fetch a thumbnail that would otherwise expire. Those requests come from our server, identify themselves as bookmarker, and carry nothing about you.
To draw a small site icon next to each save, the app may also ask Google’s public favicon service for the icon of that site’s domain — the domain only, never the full link, and nothing about you.
Deleting your data
Deleting a saved link removes it from your library. Deleting the app removes everything stored on your device.
To delete your account and everything stored on the server — your library, thumbnails and any feedback you sent while signed in — email hello@bookmarker.lol from your account’s email address, and it will be deleted within 30 days.
The website
If you leave your email address on bookmarker.lol to hear about the beta or the launch, it is stored on our servers and used only to email you about bookmarker. No one else can see the list. To be removed, reply to any of those emails or write to hello@bookmarker.lol.
The website and web app use PostHog (hosted in the United States) for product analytics and session replay, so we can see where people get stuck and fix it. Replays mask everything you type. There are no advertising trackers, and none of this data is sold or shared.
If you send feedback from the Help tab, the message is stored on our servers together with what you were using at the time (web or mobile, screen size, browser) so bugs can be reproduced. If you are signed in it is tied to your account and deleted with it; if you are signed out, the email address you may leave is used only to reply to you. Feedback is read by the person who builds bookmarker and no one else.
If you import an export file from Instagram, TikTok, X, YouTube, Pinterest or your browser, that file is opened and read inside your own browser. It is never uploaded to us, and nor is anything in it that you do not import — the rest of an archive (your photos, messages, watch history) is not read and never leaves your computer. Only the saved links you confirm on the review screen are sent to your library: the address, a title, an author, the date it was originally saved, and the topic we filed it under. Which topic is worked out in your browser too; no imported link is sent to a model.
Children
bookmarker is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially, the updated version will be posted here with a new date above.