Bookmark Manager

1. Introduction

Welcome to MarkRepo ("we", "us", or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the MarkRepo web application, API, and browser extension (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, display name, and authentication credentials (hashed; we never store plaintext passwords). OAuth sign-in providers may share a profile picture URL.

2.2 Bookmark and Content Data

We store the URLs, titles, descriptions, notes, tags, and folder structure you create. This data is associated with your account and synced across devices.

2.3 Usage Data

We collect anonymised analytics (page views, feature interactions) to improve the Service. This data does not identify individual users and is not sold to third parties.

2.4 Payment Information

Payments are processed by Stripe. We store only a Stripe Customer ID and Subscription ID; we never store full card numbers, CVV codes, or billing addresses.

3. Browser Extension Privacy

This section specifically covers the MarkRepo Browser Extension (available for Chrome and Firefox). It is provided to satisfy Mozilla AMO review requirements and to give users full transparency about what the extension does and does not do.

3.1 Permissions Used and Why

Permission	Why it is needed
activeTab	Reads the URL and title of the current tab when you click "Save to MarkRepo" or press Alt+M. Only accessed on explicit user action.
scripting	Injects a content script (`content.js`) into the active tab to extract Open Graph metadata (og:title, og:description, og:image, canonical URL, keywords). The script runs only when the popup is opened and returns data immediately — it does not persist, monitor, or transmit page content.
storage	Stores your Personal Access Token, MarkRepo instance URL, and cached user profile locally in the browser. No data is sent to third parties.
contextMenus	Adds "Save link to MarkRepo" and "Save page to MarkRepo" entries to the right-click context menu for convenience.

3.2 Data the Extension Accesses

When you save a page, the extension reads and transmits to your MarkRepo account:

The page URL (or the URL of a right-clicked link)
The page title (from the browser tab or og:title)
Optional metadata extracted by the content script: og:description, og:image URL, canonical URL, site name, author, and keywords. You can review and edit all fields before saving.
Any tags, notes, or folder selection you enter manually in the popup

3.3 Data the Extension Does NOT Collect

Browsing history or visited URLs outside of explicit save actions
Keystrokes, form inputs, or passwords
Screenshots or visual content of pages
Location data
Any data from pages you visit without triggering a save

3.4 Authentication

The extension authenticates using a Personal Access Token (PAT) that you generate from your MarkRepo account settings. The token is stored locally in the browser's extension storage and is sent only to your MarkRepo instance over HTTPS. You can revoke the token at any time from your account settings.

3.5 Network Requests

The extension makes network requests only to the MarkRepo instance URL you configure (default: https://markrepo.com). It does not contact any analytics services, advertising networks, or third-party APIs. The favicon displayed in the popup is fetched from Google's public favicon service (https://www.google.com/s2/favicons) using only the domain name of the page being saved.

3.6 Data Retention

Locally stored extension data (token, URL, user profile) is retained until you sign out or uninstall the extension. Saved bookmarks are governed by the MarkRepo web application privacy policy (see Section 5 — Your Rights).

4. How We Use Your Information

To provide and maintain the bookmark management and notes services
To sync your bookmarks and notes across devices and the browser extension
To send email reminders for tasks when you enable this feature
To improve and personalise your experience
To communicate with you about service updates, security notices, and features
To process subscription payments via Stripe

5. Your Rights

You have the right to:

Access, update, or delete your personal information at any time
Export your bookmarks and notes data in a portable format
Revoke your browser extension Personal Access Token
Opt out of email notifications from your account settings
Request a copy of all data we hold about you
Close your account at any time, which permanently deletes all associated data

To exercise any of these rights, contact us at [email protected].

6. Data Security

We implement industry-standard security measures including HTTPS for all data transmission, bcrypt password hashing, JWT session tokens with short expiry, and encrypted database connections. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take all reasonable precautions.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

With your explicit consent
With Stripe for payment processing (governed by Stripe's Privacy Policy)
To comply with legal obligations or respond to lawful requests
To protect our rights, privacy, safety, or property

8. Cookies and Tracking

We use a single session cookie to maintain your authenticated session. We do not use advertising cookies or third-party tracking pixels. You can control cookie settings through your browser, but disabling cookies will prevent you from staying logged in.

9. Children's Privacy

Our Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: [email protected]

By using MarkRepo, you agree to the collection and use of information in accordance with this policy.