Marks — Privacy Policy

Last updated: March 8, 2026

What Marks Does

Marks is a bookmark manager with a browser extension and iOS app. It lets you save web pages as bookmarks with tags and notes, archive page content for offline reading, sync Kindle highlights from Amazon, and get AI-powered tag suggestions. The extension and app connect to your Marks account to store and retrieve your data.

Data We Collect

• Page URL and title — captured from the active tab when you explicitly save a bookmark. This data is only collected when you initiate a save action.
• Page content and HTML — captured for offline archiving when you save a bookmark. On Twitter/X, tweet text, author handle, and media URLs are extracted for rich bookmark display.
• Kindle highlights — when you use the Kindle sync feature, the extension navigates to read.amazon.com/notebook and extracts your book highlights, notes, titles, authors, and cover images. This only happens when you explicitly start a sync.
• Tags and notes — any tags or notes you manually add to a bookmark.
• Authentication credentials — your email and password are used to authenticate with Supabase. Access and refresh tokens are stored locally in Chrome extension storage to keep you signed in.

Data We Do NOT Collect

• Browsing history or activity on pages you don't explicitly save
• Personal or financial information
• Cookies or tracking identifiers
• Data from other extensions or tabs you don't interact with
• Any data when the extension is idle — all collection requires user action

How Data Is Collected (Extension Permissions)

The extension requests the following browser permissions:

• activeTab — to read the URL and title of the current tab when you save a bookmark.
• scripting — to extract page content (HTML, tweet text, og:title metadata) from the active tab for archiving and rich bookmark display.
• storage — to store your authentication tokens locally so you stay signed in.
• contextMenus — to add "Save to Marks" options to the right-click menu.
• host_permissions (https://*/*) — required to extract page content from any website you choose to bookmark, and to communicate with the Marks API and Supabase authentication service.

Content scripts run on specific sites only: Twitter/X (for tweet extraction), read.amazon.com (for Kindle highlight sync), archive.today (for archived page capture), and getmarks.sh (for extension-app communication).

How Data Is Used

• Bookmark storage — URLs, titles, tags, notes, and page content are stored on your Marks account for retrieval and search.
• Offline archiving — page HTML is stored so you can read saved pages even if the original goes offline.
• AI-powered tag suggestions — when you save a bookmark, the page URL, title, and description are sent to the Marks API, which forwards them to Anthropic's Claude AI to generate tag suggestions. Only the URL, title, and a short description are sent — not the full page HTML.
• AI-powered article enrichment — when you view a saved bookmark, its content may be sent to Anthropic's Claude AI for summarization and action item extraction.
• Kindle sync — your Kindle highlights are sent to the Marks API and stored in your account for browsing and search.

No data is sold, shared with third parties for advertising, or used for any purpose other than providing the Marks service.

Data Storage and Security

• Server-side data — bookmarks, archived pages, and Kindle highlights are stored on Marks servers hosted via Supabase (database) and Vercel (API/application). Data is transmitted over HTTPS.
• Local data — authentication tokens (access token and refresh token) are stored in Chrome's extension storage or on your iOS device. The iOS app caches content locally using SwiftData for offline reading. These are never transmitted to third parties.
• Supabase authentication — your Supabase API key is stored locally to enable token refresh. Authentication is handled by Supabase's auth service.

Data Sharing

Your data is shared with the following third-party services solely to provide the Marks functionality:

• Supabase — authentication and database hosting. Stores your account, bookmarks, and Kindle highlights. Supabase Privacy Policy
• Vercel — API and application hosting. Processes API requests. Vercel Privacy Policy
• Anthropic (Claude AI) — provides AI-powered tag suggestions and article enrichment. Receives bookmark URLs, titles, and content excerpts. Anthropic Privacy Policy

No data is shared with any other third parties, advertisers, or data brokers.

Data Retention

Your data is retained for as long as your Marks account is active. You can delete individual bookmarks or Kindle highlights at any time through the Marks web app. If you request account deletion, all associated data (bookmarks, archived pages, Kindle highlights, and account information) will be permanently deleted from our servers within 30 days.

Your Rights

• Access — view all your stored data through the Marks web app at getmarks.sh.
• Deletion — delete individual bookmarks or highlights at any time. Request full account and data deletion by contacting us.
• Portability — your bookmarks and highlights are accessible through the Marks web app.
• Sign out — signing out of the extension removes your authentication tokens from local storage.
• Uninstall — removing the extension deletes all locally stored data (tokens). Server-side data remains until you delete it or your account.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Reach out at getmarks.sh or the Marks GitHub repository: github.com/crxnamja/marks