Privacy Policy

Bookmark Zero collects only the minimum required to provide the service:

• Email address — used solely to identify your account and send expiry reminders if enabled.
• Saved bookmarks — the URL, page title, triage tag (NOW / SOON / MAYBE), optional notes, and timestamps you create.
• Authentication credentials — your password is hashed and managed by Google Firebase; we never store it in plain text.

• Sync your bookmarks across your devices in real time.
• Send expiry reminders via Chrome notifications when a bookmark reaches its deadline.
• Automatically archive unacted bookmarks after the grace period and purge archives after 30 days.

We do not sell, share, rent, or monetise your data in any form.

All data is stored in Google Firebase (Firestore), hosted on Google Cloud infrastructure. Firestore security rules are configured so that only you — authenticated as the account owner — can read or write your bookmarks. No other user or party can access your data.

Data is transmitted exclusively over HTTPS. Firebase's own privacy policy governs infrastructure-level handling: firebase.google.com/support/privacy.

The extension requests only what is strictly necessary:

• activeTab / tabs — reads the URL and title of the page you are actively viewing, only when you open the extension popup to save it.
• storage — persists your login session locally so you stay signed in.
• alarms — runs an hourly background check for bookmarks past their expiry date.
• notifications — shows a Chrome notification when a bookmark expires, with Keep or Archive actions.
• sidePanel — displays your bookmark dashboard in Chrome's built-in side panel.

No permission is used to track browsing history, capture keystrokes, or access pages you have not explicitly chosen to bookmark. The extension does not execute any remote code.

• Active bookmarks — kept until you delete or archive them manually.
• Archived bookmarks — automatically hard-deleted 30 days after archiving.
• Account deletion — email avinashsdalvi@gmail.com and we will delete your account and all associated data within 30 days.