Privacy Policy

This is a draft and may change before release.

• What we store: your account ID from Firebase Authentication (Apple, Google, or email and password — Firebase keeps your email address and a protected form of your password; we never see the password), and the links and folders you save (names, notes, URLs, icon URLs, folder and app settings, and the times they were created, changed or deleted).
• Public profile and follows (only if you create a profile or follow someone): your ID, display name and bio, whether you approve follow requests, who you follow, who follows you and pending requests. Your profile and your follower/following counts are public; the lists of who you follow and who follows you are shown only to you. We never show your email address or the name from your sign-in account.
• Why: to sync your links between your devices, to show lists you choose to share to the people you choose, and to show the shared lists of people you follow.
• Where: on Google Firebase (sign-in) and Cloudflare (sync and shared lists).
• Sharing: we do not sell your data. A shared list shows its name, note and the links' names, notes, URLs and icons, and — for follower-only or public lists — your display name and ID. To make lists searchable we keep a copy of their name, note, link count and update time.
• Page images: to show what a saved page looks like, we read its title, icon and share image (og:image) through our server and keep the image's URL with the link. Pages without one may be captured on your device; those captures stay on the device and are not uploaded. Memos (items without a URL) are stored like links.
• Auto-approve domains: if you list email domains to auto-approve followers, we store the domains. When someone follows you, we check only the domain of their verified email at that moment and never store their address.
• Ads (iOS and Android apps): the apps show banner ads from Google AdMob. Google may use device identifiers and similar data to show and measure ads. Where required (such as the EEA and UK) we ask for your consent first, and you can change it from Privacy settings in the account sheet. On iOS, personalized ads are used only if you allow tracking. The web version shows no ads.
• Deletion: Delete account in the app or on the web removes your account and all synced data, including shared lists, your public profile and your follows.