ChinaDeveloper
Back to Bookmark Commander — Search & Cleanup

Privacy Policy

Bookmark Commander — Search & Cleanup

Privacy Policy — Bookmark Commander

Last updated: July 31, 2026

This policy covers the Bookmark Commander Chrome extension (version 0.1.0) and the account features it can optionally connect to at bookmark.xeviora.com.

Public copy of this policy (the URL submitted to the Chrome Web Store): https://bookmark.xeviora.com/privacy

Contact: [email protected]

The short version

Everything the extension does locally — Spotlight search, the side panel manager, duplicate detection, dead-link scanning, empty-folder and same-name-folder cleanup, and the 30-day Trash — reads your bookmarks through Chrome's own API and sends nothing to any server. There is no analytics, no telemetry, and no account requirement.

Data leaves your machine only when you explicitly start one of two optional, account-based features: AI Organize or Cloud Backup.

What the extension stores on your device

All of this lives in chrome.storage.local and never leaves your browser:

  • Interface language override, sort order, tree/flat view, and the folder you pinned as your working root.
  • Duplicate matching rules (ignore protocol, strip tracking params, ignore trailing slash, ignore hash) and dead-link scan settings (concurrency, timeout, delay).
  • The onboarding/promo dismissal flags.
  • The Trash: snapshots of anything the Cleanup tools bulk-deleted, kept for 30 days so you can restore it. These snapshots are local only — they are never uploaded.

What is sent to a server, and only when you ask

  • AI Organize (requires an account). When you press Analyze with AI, the titles, URLs and folder paths of the bookmarks in the scope you selected (up to 500 per run) are sent to bookmark.xeviora.com and forwarded to our AI provider (OpenRouter) to compute a folder proposal. This content is not used for training and is not retained after the request completes. Nothing moves in your browser until you approve the diff.
  • Cloud Backup (requires an account). When you press Backup now, a snapshot of your bookmark tree (titles, URLs, folder structure and order) is uploaded and stored encrypted at rest until you delete it.
  • Account and billing. Creating an account stores your email address and name (plus the basic profile Google/GitHub share if you use social sign-in). Payments are processed by Paddle as merchant of record; we never see your card details, only your subscription status and Paddle identifiers.

The extension authenticates by reusing the cookie of your bookmark.xeviora.com session. It stores no API keys and no passwords.

What is never collected

  • Your browsing history, or the content of the pages you visit.
  • Any bookmark you have not explicitly submitted to AI Organize or Cloud Backup.
  • Any usage telemetry from local-only use — the extension works fully offline for search, the side panel and all five cleanup tools.

Nothing is sold, rented, or transferred to data brokers, and nothing is used for advertising.

Permissions and why they are needed

The extension requests exactly the following, and nothing else.

Permission Why
bookmarks The core of the product. Reads the bookmark tree to search it, render it in the side panel, and run the cleanup tools; writes only when you create, rename, move, or delete an item.
storage Persists your own settings and the 30-day Trash on your device via chrome.storage.local (see the list above). Nothing in storage is uploaded.
sidePanel The bookmark manager UI is a Chrome side panel opened from the toolbar icon. Required to open and render it.
contextMenus Adds one right-click item, "Search bookmarks", which opens the Spotlight overlay on the current page. It runs only when you click it.
favicon Displays each bookmark's site favicon in the side panel and Spotlight rows, using Chrome's local _favicon cache. No network request is made to the site for this.
tabs Opens the bookmark you picked (here / new tab / background), focuses an already-open Cleanup tab instead of duplicating it, and reads the active tab's title and URL for the "Save tab" button. No browsing history is collected or transmitted.

Host permissions

Host pattern Why
https://bookmark.xeviora.com/* (required) Lets the extension call the account API for AI Organize, Cloud Backup and plan status, reusing your existing site session cookie. It is contacted only when you use those features or when the side panel checks your account state.
http://*/*, https://*/* (optional, requested at runtime) Requested only when you start a dead-link scan, because the scanner has to contact the bookmarked sites directly to read their HTTP status codes. Nothing is uploaded, no third party sees your bookmark list, and page content is not read — only the response status. You can decline; every other feature keeps working.

The Spotlight content script is declared for all sites because the overlay must be able to appear on whatever page you are reading when you press Ctrl+Shift+K. It renders in a closed Shadow DOM, reads no page content, and communicates only with the extension's own background worker.

Remote code

None. All JavaScript, WebAssembly, fonts and styles are bundled inside the extension package. There are no external <script> tags, no remotely-hosted modules, and no eval() of fetched strings.

Data retention and deletion

  • Local data (settings, Trash): remove it any time by emptying the Trash or uninstalling the extension.
  • Cloud backups: delete individual snapshots from the Cloud Backup tab at any time.
  • Account deletion: self-serve at Settings → Danger zone on bookmark.xeviora.com. Type the confirmation code shown there and your account, every cloud backup and your credit history are deleted immediately and permanently. No email request, no waiting period. (Cancel an active Pro subscription first — deleting the account does not cancel billing.)

Children

Bookmark Commander is not directed at children under 13 and does not knowingly collect data from them.

Changes

Material changes to this policy will be reflected here and at https://bookmark.xeviora.com/privacy, with an updated "Last updated" date.

Contact

[email protected]

Keep the mirrors in sync. This document is the store-kit copy. The hosted page at frontend/src/app/(marketing)/privacy/page.tsx is what the Chrome Web Store reviewer actually opens — if you change one, change the other in the same pass.