Private Bookmark Vault — Privacy Policy

What we collect

Nothing. The Private Bookmark Vault browser extension does not collect, transmit, sell, or share any personal information or browsing data. There are no analytics, no tracking, no accounts, and no external servers.

The extension requests no host permissions, which means your browser itself will not allow it to contact any website. This is not a promise you have to take on trust — it is enforced by Chrome, and you can check it on the extension's permissions page.

What the extension stores (locally, on your device)

To do its job, the extension saves the following only in your own browser using Chrome's storage API. This data never leaves your device:

• Your encrypted bookmarks — the titles and web addresses you choose to save, encrypted with AES-256-GCM. When the vault is locked they exist only as unreadable ciphertext.
• An encrypted key — a key pair generated on your device when you create your vault. The private key is itself encrypted using a key derived from your master password with PBKDF2-SHA256 at 600,000 iterations.
• Your preferences — auto-lock timing, folder name, and display options.

You can delete all of it at any time from the extension's settings page, or by removing the extension from your browser.

Your passwords

Your master password is never stored anywhere, in any form. It is used to derive an encryption key in memory, and that key is held in the browser's temporary session memory only while the vault is unlocked. It is discarded when you lock the vault, when the auto-lock timer expires, or when the browser closes. Passwords you set on individual folders work the same way.

The consequence is worth stating plainly: if you forget a password, nobody can recover that data — including us. That is what real encryption means, and it is why the extension prompts you to keep a backup.

Permissions

The extension requests only what it needs: bookmarks, storage, alarms, and activeTab.

• bookmarks — to create, read and remove the vault's own bookmark folder. This is the core function. No bookmark outside the vault's own folder is read or modified.
• storage — to save your encrypted vault and preferences on your device.
• alarms — to lock the vault automatically after a period of inactivity.
• activeTab — to read the title and address of the page you are on, only at the moment you click "+ Current tab". The narrower activeTab was chosen over the broader tabs permission deliberately, so the extension cannot see your other tabs or your browsing.

Browser sync

Your vault is stored locally and is not synchronised between devices. One exception is worth being clear about: the extension has an optional Show in bookmarks bar setting, off by default. While it is switched on, your saved bookmarks are temporarily created as ordinary browser bookmarks so you can rearrange them — and while they are ordinary bookmarks, they are subject to your browser's own sync settings like any other bookmark. Switching it off removes them again. The contents of a password-protected folder are never written out while that folder is locked.

Backups

The extension can export an encrypted backup file. It is created only when you ask for it, saved wherever you tell your browser to save it, and encrypted with the same password. It is never uploaded anywhere.

Third parties

Private Bookmark Vault sends data to no third party and embeds no third-party analytics, advertising, or remote code. All code runs from the installed extension package.

Children

The extension is not directed at children and collects no information from anyone.

Changes to this policy

If this policy changes, the updated version will be published at this same URL with a new "last updated" date. Because the extension collects no data, no change can retroactively affect information already gathered — there is none.

Contact

Questions about this policy? Email contact@tidytools.net.