Sidst opdateret: 4. september 2026

Privacy Policy

1. Data Controller

The data controller for the processing described in this policy is BookmarkForge (contact in section 17). For the companion server and license infrastructure, the operator of that deployment acts as controller.

2. Introduction & Scope

BookmarkForge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use our application.

3. Data We Do NOT Collect

We want to be clear about what we do not collect:

• No bookmarks or URLs are sent to our servers
• No notes or documents leave your device
• No AI prompts or responses are logged by us
• No browsing history is tracked
• No personal information is required to use the app
• No analytics are collected by default

4. Where Your Data Lives

All your data is stored locally in your browser using:

• IndexedDB - for bookmarks, documents, and settings
• Secure Storage - for encrypted keys and passwords
• Service Worker Cache - for offline functionality

5. Encryption

Your data is encrypted using:

• AES-GCM-256 encryption for all stored content
• Argon2id (memory-hard KDF) for password-derived keys
• Keys are derived and stored locally in your browser

6. Content Security Policy (CSP) Reports

BookmarkForge uses Content Security Policy (CSP) headers to prevent cross-site scripting and data injection attacks. If your browser blocks a resource because of these headers, it automatically sends a brief technical violation report to the same origin that served the application (the /csp-report endpoint). The operator's collector keeps only:

• The origin of the blocked resource (path, query and fragment are stripped; never your personal data)
• The CSP directive that was violated
• The origin of the page where the violation occurred
• A one-way salted hash of your IP address, used solely for rate limiting -- your IP is never stored

7. AI Providers

When you use AI features:

• Local AI (WebLLM): Runs entirely in your browser. No data leaves your device.
• Cloud AI (Gemini, OpenAI, Anthropic, etc.): Your prompts are sent directly to the provider. We do not intercept, store, or log these requests. Each provider has its own privacy policy.

8. Optional Error Reporting (Opt-In Only)

You may choose to enable error reporting in Settings. If enabled:

• We receive anonymous technical error logs when the app crashes
• We NEVER receive: your bookmarks, text, URLs, prompts, or any personal content
• Only technical stack traces and device information are sent
• You can disable this at any time

9. PWA Bookmarklet & Share Target

BookmarkForge offers two ways to save content from your browser:

• Bookmarklet: Drag the "Save to Forge" button to your bookmarks bar. Click it on any page to save instantly.
• PWA Share Target: On mobile, use your browser's native Share menu to send links to BookmarkForge.

10. Third-Party Services

We use the following third-party services:

• Google Fonts - for typography (fonts are cached locally)
• AI Providers - Google, OpenAI, Anthropic, etc. (only if you configure them)

11. Your Rights (GDPR)

BookmarkForge is designed so that we never receive your personal data, which means most GDPR obligations fall away by design. Under the General Data Protection Regulation (GDPR), you retain the following rights:

• Right of access (Art. 15): All your data is on your device. Use the Export feature to obtain a complete, machine-readable copy at any time.
• Right to rectification (Art. 16): Edit your bookmarks, notes, and documents directly in the app.
• Right to erasure (Art. 17): Use the built-in data removal (Settings -> Danger Zone / Nuclear Forget). This permanently deletes all local data, including encrypted keys and recovery data. We hold no copy.
• Right to data portability (Art. 20): Exports are open formats (JSON, Markdown, HTML) usable in other applications.
• Right to object and restrict processing (Arts. 18/21): All optional processing (cloud AI, telemetry, error reporting) is strictly opt-in and can be disabled at any time in Settings.
• Right to withdraw consent (Art. 7): Disabling optional features in Settings withdraws consent immediately and stops all associated processing.

12. Lawful Basis & Processing Register

Under GDPR Article 6, we document the lawful basis for every processing activity that involves any data leaving your device:

13. Third-Party Processors & Data Transfers

When you use optional features, data may be processed by the following third parties (sub-processors). Each transfer happens only when you explicitly use the feature:

• Google (Gemini API) -- cloud AI prompts and generated media. Processes data in Google Cloud (global regions, data residency configurable by Google; see Google's Gemini API terms). Transfers outside the EU may occur under Google's Standard Contractual Clauses.
• OpenAI / Anthropic / Groq / OpenRouter / Hugging Face -- alternative cloud AI providers, only if you configure them. Their respective terms and SCCs apply.
• Whop -- Pro license payment and entitlement verification. Receives your license key and payment details when you purchase Pro. Whop acts as an independent controller for payment data.
• Sentry (Functional Software) -- optional error reporting, only if you enable it in Settings and the operator has configured a diagnostic endpoint. Receives redacted technical stack traces (URLs without query strings, secrets removed, no user identity). Sentry acts as a processor under its Data Processing Agreement; see Sentry's privacy policy for international transfers.

14. Record of Processing Activities (ROPA summary)

A summarized record of processing activities (GDPR Art. 30) is maintained covering: purposes, categories of data subjects (app users, paying customers), categories of personal data (license keys, hashed IPs, opt-in technical reports), recipients (the processors above), retention limits, and security measures (client-side AES-256-GCM encryption, TLS 1.3 in transit, HMAC-signed signaling, rate limiting).

15. Children's Privacy

BookmarkForge is not designed for children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect any personal information from anyone.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date above and, for breaking changes affecting processing, announced in-app before they take effect.

17. Contact

For privacy questions, data subject requests, or concerns:

• Email: bookmarkforge@proton.me

Terms of Service

Sidst opdateret: 23. juli 2026

1. Acceptance of Terms

By using BookmarkForge, you agree to these Terms of Service. If you do not agree, do not use the application.

2. Description of Service

BookmarkForge is a local-first knowledge management application that allows you to:

• Save and organize bookmarks
• Create and edit documents
• Use AI-powered features (locally or via cloud providers)
• Sync data between your devices using peer-to-peer connections

3. Pricing & Licenses — Lifetime of v1 (No Subscriptions)

Individual licenses are sold as Lifetime for a major version — pay once, own v1 forever. No monthly billing. Refunds: 30 days via Whop. Payments handled by Whop (card, PayPal, crypto; we never see card data).

• Free — $0 forever: 2,500 bookmarks on any device (each keeps its own vault), smart search — full-text + semantic, the feature Raindrop charges yearly for — knowledge graph, AI with your own API key, basic templates, JSON/HTML export, PWA + extensions. At 2,500, reading, search and export never stop; only new saves pause.
• Pro Lifetime v1: Early Bird $59 (200 licenses), then $79 regular, later $89–$99 after traction. Includes: unlimited bookmarks, 5 devices + P2P sync, local AI (WebLLM/Ollama) + RAG + Expert agents, flashcards, PDF/OCR, 10+ export formats + encrypted backups, AES-GCM vault. Lifetime of v1: all v1.x bugfixes + minor features forever + 12 months of feature updates from purchase; security updates forever. After month 13 you keep v1 functional, only without new features.
• Upgrade without subscription: future majors (v2, v3) are separate products: $89 for new customers, $35 for v1 owners (60% off). Skip the major and v1 keeps working. That's recurring revenue without forcing a subscription — same model as Affinity/Sketch/Sublime.
• Legal line: Lifetime license for BookmarkForge v1. Includes all v1.x updates and 12 months of feature updates. Security updates forever. Future major versions (v2, v3) 60% off for existing owners. 30-day refund via Whop.

4. Support SLA

Single maintainer. The vault is encrypted — we cannot see your data and we never ask for your vault password or 24-word recovery phrase.

• Free: community — Help Center (/help) + GitHub Discussions, best effort. Search BF-E* code first + paste diagnostic.
• Pro: email bookmarkforge@proton.me (subject: Pro) — 48h business days (Mon–Fri). Include diagnostic from Settings → Advanced → Copy diagnostic.
• Before contacting us, use Settings → Advanced → Copy diagnostic or Help → Diagnostics. The diagnostic contains only counts/versions (bookmarks, storage %, build hash) — never vault content, URLs or prompts. See Help § BF-E* for error codes.
• Forgot password (BF-E101): we cannot recover it. When you create a vault we show a 24-word recovery phrase once — write it on paper. Without it the vault is unrecoverable, by design.

5. Local-First Nature

You understand and agree that:

• BookmarkForge runs entirely in your browser
• All data is stored locally on your device
• We do not host, store, or backup your data on our servers
• You are responsible for backing up your data using the export feature

6. User Responsibilities

You agree to:

• Maintain backups of your important data
• Keep your vault password secure (we cannot recover it without the 24-word recovery phrase)
• Use the application in compliance with applicable laws
• Not use the application for illegal purposes

7. AI Features

When using AI features:

• You are responsible for the content of your prompts
• Cloud AI providers have their own terms of service and privacy policies
• We do not guarantee the accuracy of AI-generated content
• Local AI models require compatible hardware (WebGPU support)

8. Limitation of Liability

BookmarkForge is provided "as is" without warranties of any kind. We are not liable for:

• Data loss due to browser clearing storage
• Hardware failures
• Incompatibility with your device
• Errors in AI-generated content

9. Intellectual Property

• BookmarkForge's code and design are copyrighted
• Your content (bookmarks, notes, documents) remains yours
• We claim no ownership over your data

10. Termination

Since BookmarkForge runs locally, there is no account to terminate. You can stop using the application at any time by closing your browser.

11. Governing Law

These terms are governed by applicable laws. Any disputes shall be resolved in the appropriate courts.

12. Contact

For questions about these terms:

• Email: bookmarkforge@proton.me
• Help: Help Center — FAQ, BF-E* codes, SLA & diagnostics