Privacy policy

Information we collect

• Account information: your name, email address, account identifier, password hash, account settings, and sign-in session records. Your password is stored as a hash, rather than as a readable password.
• Your library: saved URLs, titles, lists, tags, notes, summaries, page metadata, and extracted page text or HTML. URLs and page content may contain personal information you choose to save.
• Library activity: save and update dates, read/open state and timestamps, the source used to save a link, and preferences needed to organize and display your library.
• Technical information: page-extraction status and errors, plus network and service information processed by our hosting providers, such as IP addresses, request details, timestamps, response status, and errors.
• Support information: your email address, correspondence, and any diagnostic information or attachments you choose to send.

How we use information

We use this information to authenticate you, save and synchronize your library, retrieve page details, apply your preferences, troubleshoot problems, protect the service, and respond to support and privacy requests. We may also retain or disclose information when required by law.

We do not sell your personal information, use your saved library for targeted advertising, or integrate advertising SDKs into the app. We do not track you across other companies' apps and websites for advertising.

Service providers and linked websites

We use Vercel for application hosting and Supabase for our PostgreSQL database and backups. Support email is routed through Microsoft's email services. GitHub Pages hosts this support and privacy website. Providers process information needed to deliver, secure, and operate their services.

Our primary database and configured application functions are in the United States. Provider infrastructure, support, and security processing may take place in other locations where those providers operate.

When you save a link, our service may request the linked page to extract its title, metadata, and content. Loading remote images or opening a saved website can also send your IP address and other request information to the website or image host. Those websites may use cookies or require their own account. Their privacy practices are governed by their own policies.

This support website does not include an analytics script or advertising cookies. GitHub Pages records visitors' IP addresses for security purposes. See GitHub's privacy statement.

How long information stays

Accounts and bookmarks

Account and library data stays in the active database while you use the service. There is no automatic deletion based on account inactivity. Deleting an individual bookmark removes it and its associated extracted content from the active database. Archiving, logging out, or uninstalling the app does not delete the account or its library.

Sessions and device storage

Session credentials can expire or be revoked, but historical session records may remain in the database until account data is deleted. The app and browser also keep sign-in state and preferences locally. Local copies are subject to the app's, browser's, and operating system's storage controls.

Backups and operational records

Database backups normally rotate over approximately seven days, so deleted data may remain in a backup until that backup expires. Supabase currently provides a seven-day operational-log access window. Hosting, security, deployment, and provider records have separate retention rules; these windows are not a promise that every provider copy is physically erased on the same schedule. Information needed for a legal obligation or an active security investigation may be retained longer.

Support correspondence

Support correspondence does not have an automatic deletion schedule. It may be kept for follow-up, resolving disputes, security, and applicable legal requirements. You may request deletion of correspondence along with other personal information.

Your choices and requests

You can edit or delete individual bookmarks in the app. To request access to, correction of, or deletion of your account and associated data, email support@codesplash.ai. Contact us from your account email when possible. We may verify your identity, but will not ask you to email your password.

In iOS version 1.0, open Settings → Account → Delete Account, enter your current password, and confirm deletion. After successful confirmation, your account, saved library, extracted page content, and sign-in sessions are removed from the active database. The app signs you out and clears its local session and cached library. Older app versions and other clients can request account deletion through support. For support requests, we will explain necessary verification, applicable exceptions, and the expected processing time, and confirm completed deletion. Backup and provider-record retention is described above.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information, object to or restrict certain processing, or complain to your local privacy regulator. Contact us to exercise applicable rights.

Security

The service uses encrypted network connections and password hashing. Access controls help limit access to account data. No network or storage system can guarantee absolute security. Avoid saving credentials or secrets in bookmark URLs or notes.

Children

CodeSplash Bookmarks is a general-purpose service and is not directed at children. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and address it.

Changes and contact

We may update this policy as the service changes. The effective date above identifies the latest version. For questions, contact Kurtis Pritchard at support@codesplash.ai.