Privacy policy

What Trovemarks keeps about you, why, and who else sees it. Last updated 5 November 2026.

The short version

We keep what it takes to run your account and the links you save. We don’t sell your data or track you across other sites. Private links stay private everywhere: they never appear in feeds, counts, search or anyone else’s view.

What we keep

  • Your account: your email address, username, display name, bio and avatar, and the passkeys you add (we store only their public keys).
  • What you save: each link’s address and title, plus the collections, tags, notes and privacy setting you give it.
  • Copies of saved pages: to keep links readable and searchable, our servers fetch each page you save and may store its text, a screenshot and the site’s icon.
  • What you do with other people: the collections and people you follow, your comments, and your notification and email digest settings.
  • Sources: each place you save from (a browser extension, an API key, an import) has its own name and settings, so you can pause or revoke each one.
  • Billing: if you upgrade to Pro, your plan and its renewal date. Card details go to Stripe and never reach us.
  • Connected services: if you connect another service, such as GitHub, we keep the access it grants us, encrypted, and only what we need from it to bring your links in.
  • How the product is used: to see what works and fix what doesn’t, we record actions such as signing up, saving a link, making a collection public or following one, and which pages of Trovemarks you visit. These records hold IDs, counts and settings: for example, “saved a link from the browser extension, into 1 collection, private”. They never hold the addresses, titles, notes or tags you save, or what you search for. The website a link goes to is recorded only when you click a link on a public page.
  • Server logs: to keep Trovemarks running and fix errors, our servers log each request: the page or API address asked for, your IP address and browser, and how it went. Sign-in links and other secrets in those addresses are removed before anything is written. Logs are kept for 7 days.

We use one cookie to keep you signed in. It lasts 30 days from your last visit. Our analytics also keeps a random ID in your browser, so visits from the same browser count once. There are no advertising cookies.

Trovemarks has no ads today. We may add them later to help pay for the free plan. If we do, we’ll update this policy and tell you before they appear. Ads would never use your private links, notes or anything from the browser extension, and we still wouldn’t sell your data.

The browser extension

  • The extension reads a tab’s address and title only when you save it: by clicking its button, pressing Alt+Shift+S or using the right-click menu. It doesn’t read your browsing history or the pages you only visit.
  • It keeps a sign-in token for your account, a random ID for the install and your save defaults, all in the browser’s local extension storage. It never sees your password or passkey.
  • Bookmark sync is off unless you turn it on. When it’s on, the extension copies your existing browser bookmarks into your account once, privately, and then saves new bookmarks as you make them. It never changes or deletes your browser’s bookmarks.
  • It talks only to trovemarks.com.

Data from the extension is used only to save links to your account, and is never sold, transferred to others or used for advertising or credit decisions.

Who else sees it

Other people see only what you make public: your profile, your public collections and the public links in them, and your comments. Everything else is visible only to you.

A few companies process data for us, only to provide the service:

  • Hosting and storage: our servers, and Cloudflare for storing page copies, screenshots, icons and backups.
  • OpenAI: for search by meaning and related links, the title, description and text of the pages you save, and the searches you make, are turned into embeddings. Only that text is sent: no name, email, username or anything else that says whose it is, so OpenAI has no way to tell who the data belongs to. Your notes and tags are never sent. OpenAI doesn’t use data sent through its API to train its models.
  • Stripe: for payments, if you upgrade.
  • PostHog: for the usage records described above, stored in the US. It gets your account’s ID and username, never your email address.
  • Better Stack: stores our server logs, described above, in the EU for 7 days.
  • Email delivery: to send sign-in links, notifications and digests.

We’ll share data with authorities only when the law requires it.

Your control

  • Make any link or collection private or public at any time.
  • Export everything you’ve saved from Settings → Import & export.
  • Pause or revoke any source, including each browser extension, from Settings → Sources.
  • Delete your account from Settings → Account. We keep it for 30 days in case it was a mistake, then erase it with everything it owns.

Sign-ups that are never confirmed are deleted after 7 days.

Changes and contact

If this policy changes in a way that matters, we’ll tell you by email before it takes effect. Questions or requests: [email protected].