Privacy Policy

This extension does not collect, store, or share any personal or sensitive user data. One optional feature — Site icons, available on Firefox and turned off by default — sends the host name of a bookmark to a third-party icon service. It is described in full below, and your consent is requested before it can be turned on.

Permissions

• bookmarks — Core functionality — reads the levels of the bookmark tree currently on screen so they can be displayed, reads the whole tree on the device to search bookmarks and find duplicates and empty folders, and writes back the bookmarks you create and the moves, sorts, renames, edits, and deletions you perform. When the optional Trash is on, it also saves deleted bookmarks locally and recreates them when you restore one. Your bookmarks are read and written in place; nothing is transmitted.
• storage — Used to save user preferences (default view, board layout, click behavior, badges, site icons, Trash settings, theme, and language), small pieces of interface state, and license status locally on the device.
• alarms — Used to schedule daily cleanup of expired Trash items, periodic license refresh, checks for product notices, and the optional sync in the background.
• contextMenus — Used to add a single Open in a tab item to the context menu of the extension's own toolbar icon. It never appears on web pages and reads no page content.
• sidePanel (Chromium-based browsers only) — Used to open the extension's side panel, its main user interface; the same page can also be opened in a regular tab. On Firefox the same interface is provided by sidebar_action, which needs no permission.
• favicon (Chromium-based browsers only) — Used to display website icons next to bookmarks in the side panel for easier identification. Icons are read from the browser's own local icon cache; no network request is made. Firefox has no equivalent permission or interface, so a letter tile is shown there unless you turn on Site icons.
• Optional data collection (bookmarksInfo, Firefox only) — Requested only when you turn on Site icons, because host names taken from your bookmarks are then sent to a third-party service. Nothing is requested at install time.
• Optional host permissions (https://*/*, http://*/*) — Requested only if you choose to sync through a storage endpoint of your own. Nothing is requested at install time: the permission is asked for the single origin you enter when you save a storage configuration.

Local data storage

The browser's own bookmarks are the only source of data. What the extension stores on the device is limited to your settings, your license status, and small pieces of interface state such as which folders you left collapsed. None of it is transmitted to any server.

Search, badges, and the duplicate and empty-folder checks all work on the device while the extension is open. Nothing about them is stored or sent.

Trash (optional)

The Trash is off by default. While it is on, bookmarks you delete anywhere in the browser (titles, addresses, folder structure) are stored in a local IndexedDB database on the device so they can be restored, and are never transmitted to any server. Expired records are purged automatically based on the retention period you choose.

On Firefox the Trash also keeps a copy of your bookmark tree in that same local database. This is unavoidable there: Firefox reports a deleted folder without any of its contents, so the contents have to be known beforehand or they cannot be recovered at all. The copy stays on the device, is never transmitted, and is not part of the optional sync. It exists only while the Trash is on and is deleted as soon as the Trash is turned off.

Site icons (Firefox only, optional)

Firefox provides no way for an extension to read the browser's own icon cache, so the only way to show real site icons there is to request them from an outside service. This is offered as a setting that is off by default. Turning it on asks for your consent first, and you can turn it off at any time.

While it is on, the extension requests icons from DuckDuckGo (icons.duckduckgo.com). Only the host name of a bookmark is sent — for example example.com, never the full address, the page title, or the folder it sits in. Requests are sent without a referrer, and host names with no icon available are remembered locally for a day so the same request is not repeated. Bookmarks whose icon cannot be retrieved keep their letter tile. Turning the setting off stops all such requests immediately.

Bring your own storage

Cross-device sync is optional and off by default. When you turn it on, you supply your own storage endpoint, and your settings — default view, board layout, click behavior, badges, site icons, Trash settings, theme and language — are exchanged directly between your devices and that endpoint. Bookmarks themselves are never synced by this extension: they are the browser's own data, with the browser's own sync. Trash items are not synced either: they stay on the device that captured them. We operate no sync server, never receive that data, and never see the endpoint's credentials — they are stored only on your device.

Network communication

Apart from a storage endpoint you configure yourself and the optional Site icons feature described above, the extension only communicates with our first-party servers. api.sovkit.com handles optional Pro license management, which occurs when the user explicitly initiates a purchase or activates a license key; the only data sent is the license key, a device identifier, and an email address during checkout. data.sovkit.com hosts a static announcement file that the extension downloads periodically to show product notices; this request sends no data about you and returns the same file for everyone. Apart from the host names sent by the optional Site icons feature described above, no bookmark data, browsing history, or other personal information is ever transmitted.