Privacy Policy

Last updated: June 2026

1. Data We Collect

Secure Bookmark Manager collects only the information you provide directly: your username, a bcrypt-hashed password, an optional TOTP 2FA secret, and the bookmark data (URLs, titles, descriptions, folders, and tags) you choose to save. No analytics, advertising identifiers, or behavioural tracking data are collected.

2. Cookies and Session Storage

This application uses strictly necessary session cookies only. These cookies maintain your authenticated login session and, where enabled, your two-factor authentication verification state. They are not used for tracking, advertising, or any purpose beyond secure session management. A separate localStorage key (theme) stores your light / dark mode preference, and cookie_consent records your acknowledgement of this notice. Neither value is transmitted to any server.

3. Data Storage

All data is stored in SQLite database files on the server that hosts this application. No data is transmitted to third-party services. You are solely responsible for the security of your hosting infrastructure.

4. Third-Party Requests

When you add a bookmark and leave the title or description blank, the server makes a one-time HTTP request to the target URL to scrape page metadata (title and description). This request originates from the server, not your browser. No data from that request is shared with any third party. Bootstrap CSS, Bootstrap Icons, and Bootstrap JavaScript are loaded from the jsDelivr CDN at page load time.

5. Data Retention and Deletion

Your data persists for as long as your account exists on this installation. You may delete individual bookmarks at any time from the dashboard. You may also permanently delete your account and all associated data yourself at any time using the Delete Account option in the Danger Zone panel on the dashboard. This action is immediate and irreversible — no administrator intervention is required.

6. Contact

For questions about this privacy policy, please contact the administrator of the server on which this application is hosted.