Privacy Policy

Last updated: 1 November 2026

NookMarker ("NookMarker", "we") is a bookmark manager operated by Talha Khan, a sole proprietor based in India. This policy covers the website (nookmarker.com), the app (app.nookmarker.com), and the NookMarker browser extension. It is written in plain English and describes what the software actually does.

The short version

What we store when you create an account

An account is free (Freemium) or paid (Premium). When you sign up, we store:

• Sign-in details — your email address and a hashed password (we never see the password itself). If you sign in with Google: your name, email, profile photo, and Google account ID, as shared by Google.
• Profile — an optional display name.
• Your content — the bookmarks (address, title, icon address), folders, project boards, to-dos, notes, activities, and subscription entries you sync.

What we never collect

Your phone number. Your date of birth. Card or bank details — payments are processed by Razorpay, and your card data goes to them, never to us. Your location — the weather widget uses a city name you type in yourself, not GPS. Your browsing history — we never see where you go, only the individual pages you deliberately save (see The browser extension for exactly what a save sends).

The browser extension

The NookMarker extension adds one button to your toolbar. It has no login of its own and stores nothing on your device.

• It reads nothing until you click it. There is no background monitoring, and nothing of ours runs on the pages you browse. When you press the button it reads that one page, once, and stops — nothing is left behind on the page and nothing keeps running afterwards. Until you press it, it cannot read the page you are on, and it can never read any other page you have open.
• The one thing it checks about your other tabs is whether NookMarker itself is already open in one of them, so it can use that tab instead of opening a new one every time. It is granted this for app.nookmarker.com alone, and it learns nothing about any other site you have open.
• When you do click, it reads that one page's address and title, the site's own icon, and a short description of the page — the text you have selected if you selected any, otherwise the description the page publishes about itself. Then it opens NookMarker with the "New bookmark" box already filled in. You still choose the folder and press Save — nothing is saved by the click alone, and every filled-in box can be edited or cleared before you do.
• Where that goes. Those four things travel to app.nookmarker.com, so they reach our servers in the ordinary way any web address does. Once you save, the bookmark follows the same rule as every other one: without an account it stays in your browser; signed in, it syncs.
• We do not sell or share this, or use it for advertising, and we use it only for the features you choose, such as saving it or asking Nookly about it. Our use of data from the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Separately, a small number of invited beta testers help fill a shared list of website icons, so that sites the usual icon services don't cover still show a real icon for everyone. When one of them saves a bookmark, three things may be added to that list: the site's icon image, the site's hostname (example.com, never the full page address), and which account contributed it. That last part means we can see that a beta tester bookmarked something on that site — so if you are a beta tester, that is what you are sharing. The list never holds a page address, a page title, or anything at all about ordinary accounts, which only read from it and never write to it.

Where your data lives

Your content is stored in Mumbai, India, on Supabase, hosted on Amazon Web Services (ap-south-1). Some services below run outside India and receive only what is listed for them; Nookly AI has its own section.

• Board images are stored with Cloudflare (R2) in our account.
• A board image is deleted from our storage when it leaves your Recycle Bin.
• GIF search is provided by KLIPY, which receives search words and IP addresses.

Nookly AI

Nookly is the assistant inside the app. It is offered to every signed-in account — a free account has 10 questions a day — it is on unless switched off in Settings → Nookly AI, and the first time you open it a short notice asks first; nothing is sent before you accept it.

• What is sent, and when. Only when you send Nookly a message, or open it for your daily briefing (below): the message, the earlier messages of that chat, your device's date, time and time zone, and the items it needs — your to-dos, your activity and subscription trackers, the names of your folders, mind-maps and notes pages, the folder, mind-map and notes page you opened last, and any bookmark or notes page you ask about. When Nookly reads a notes page, each line that looks like a password, PIN or OTP, a card, bank-account or Aadhaar number, a PAN, a UPI ID or an access key is left out and stays on your device. This check goes by the usual ways such details are written, so it may miss one written unusually — keep such details out of pages you ask Nookly about. If Memory is on, what Nookly has remembered about you is sent too — the “About me” and “Preferences & routines” lines every time, the other lines only when they match your message. If your chats are saved to your account, a one-line note of each of your last five chats is sent as well. When you ask what happened on a day or a week, the names of that time's items and their dates are sent too, with the one-line notes of that time's chats.
• Where it goes. To OpenRouter, a routing service in the United States, which passes it to a company that runs the AI model. We let OpenRouter use only hosts it lists as keeping no data at all (zero data retention), headquartered in the United States or Europe. All of them are outside India. OpenRouter states that it does not use your messages or the replies to train models. Your name and email address are not sent, unless you type them yourself.
• Links, web search and sorting bookmarks. When you ask Nookly what a link or a saved bookmark is, or ask it to sort your bookmarks into folders or write their descriptions, our server opens those pages for you — the sites see our server's address, not yours. It reads only the page's own description or its text, sends no cookies (so it never sees a page behind your sign-in), and never opens a link that does something when opened (such as unsubscribe or confirm) or a private share link. That page text, and for a sort or descriptions your bookmarks' titles and addresses, go to the AI as described above; a part of an address that looks like a password or a key is hidden first. We keep none of it: your device keeps the pages' short descriptions for a week, so a second sort reads fewer pages, and a sort's or the descriptions' progress and Undo — deleted when you sign out. How the reader works, and how a site can block it. Web search runs only after you say yes to it the first time Nookly needs it: the words Nookly searches for, written from your message, go through OpenRouter to a search company — Exa or Parallel, each of which states that it keeps no search data. OpenRouter's own no-retention promise does not cover search, so that company's own policy applies. The pages found are shown under the reply as its sources. You can switch web search off in Settings → Nookly AI.
• Memory (beta and Premium). Nookly writes what you tell it about yourself into a book called “Nookly AI” in your own Notes, where you can read, edit or delete every line; its log of what it did sits in the same book. Long numbers (such as Aadhaar, bank or card numbers), PAN numbers, passwords and links are never written there. You can switch Memory off in Settings: nothing from that book is then sent. To find the lines that match a message, each line of that book, and each message when you send it, also goes to an AI model that turns text into numbers for search — through OpenRouter, only to hosts that state they keep no data (zero data retention), in the United States or Europe. The numbers are kept only on your device, never in our database, and signing out deletes them. What you are typing is never sent before you press Send.
• Questions about your data (beta and Premium for topics). When you ask Nookly how many or which of your items there are, the app works the answer out on your device and sends the AI only that answer. To match a topic (“bookmarks about web design”), your bookmarks’ titles, descriptions, sites and folders, and your notes pages’ titles and first lines, go to the same model that turns text into numbers for search, under the same terms as Memory above; the numbers are kept only on your device, and signing out deletes them.
• Saved chats (beta and Premium; a free account keeps its chats on its device). Your chats are stored in your account, in Mumbai, so they follow you across devices. Each chat is deleted 30 days after its last message. You can delete one chat or all of them at any time, or switch saving off, which keeps them on your device only.
• Usage log. For every AI request we keep a row with the time, the cost, the number of tokens, the names of the actions Nookly took, why the reply ended, which version of the app sent it, and an error code if something failed (on our side or in your browser) — never the text of a message or a reply. It is what your monthly usage bar — or a free account's questions left today — is counted from. Rows are deleted after 13 months.
• Reporting a reply. A small thumbs-down under each reply lets you send us that one exchange — your message, the reply, what Nookly changed, and a note if you write one — only after you press Send. It is stored in your account's database in Mumbai, never sent to an AI service, and only we read it, to fix Nookly. It is deleted after 90 days.
• Daily briefing and notifications (beta and Premium). Once a day, the first time you open Nookly after your briefing time (8:00 unless you change it in Settings → Nookly AI), the app asks Nookly for your briefing; it is sent as described above, with a count of your to-dos, trackers and subscriptions. It is written once a day for your account: the first of your devices writes it, and the others show that same chat if your chats are saved; we keep the date of each day's briefing for a week. If you turn notifications on for a device, we store that device's push address and keys, its time zone and your briefing time, in Mumbai. Our server then sends each notification — a to-do's text at its time, a subscription's name 3 days before it ends, or a line that your briefing is ready — through your browser's push service (Google, Apple or Mozilla), encrypted so that they cannot read it. We keep a note of which items were sent for 40 days, so that none is sent twice. Turning notifications off, or signing out, ends them on that device.
• Stopping. Switch Nookly off in Settings → Nookly AI and nothing more is sent. Deleting your account deletes your chats, your memory book and your usage log with it.

Services we rely on

No ad networks, no data brokers, no social-media pixels.

Data security

• Everything between your browser and our servers travels over HTTPS.
• Database rules let each account reach only its own data.
• Card and UPI details go straight to Razorpay; they never reach us.

Cookies and local storage

The app keeps its data in your browser's localStorage and IndexedDB — that is the app working, not tracking. We set no advertising or tracking cookies. The app shows one notice about its storage, once.

Your rights

Under India's Digital Personal Data Protection Act, 2023 (and, for visitors from elsewhere, laws such as the GDPR), you can:

• See and correct your data — all of it is visible and editable inside the app.
• Export your synced data from the app.
• Delete your account — in the app under Settings → Profile → Delete account. You confirm it with your password (or, for Google sign-ins, a code we email you), and we then email you the date. Your account is marked immediately and permanently deleted on or just after the day 7 days later; signing in at any point during those 7 days lets you cancel with one click, and nothing is removed until they are up. You can also email [email protected] from your account address and we will do it for you.
  Deletion removes your account and everything synced to the cloud. Three things deliberately remain: payment records, which we must keep for tax and accounting but which no longer link to you (Razorpay keeps its own record); any website icons you contributed to the shared icon store, which contain no personal data and are anonymous; and a dated note that a deletion happened, with no name, email or reason. Emails you sent us and feedback you sent through Tally stay with those services until you ask us to remove them. The copy of your bookmarks stored in your own browser is yours: on the browser you delete from, NookMarker clears it for you. Any other browser you were signed in on is signed out, and the copy there is removed the next time NookMarker opens there, or when you clear your browser data. We do not currently run scheduled database backups; if we enable them in future, any backup copy would be cleared within our hosting provider's backup retention window.
• Complain — grievance details are on the Contact page: acknowledgment within 48 hours, resolution within one month.
• Nominate another person to exercise these rights on your behalf, by emailing us.

Crash reports

If the app hits an error, your browser sends us a short report so we can fix it: the error message, where in our code it happened, which screen you were on, and your browser's identifier: its name, version and operating system. It carries no account, no email address and no IP address, and it is sent with or without an account. Error messages are technical, but on rare occasions one can quote a fragment of what caused it — a malformed link, for example. We keep at most 500 distinct errors; older ones are removed as new ones arrive.

Abuse limits

Two things on our servers answer anyone, with or without an account: the price check on the upgrade screen and the crash reports above. So that one machine cannot flood them, each request adds one to a counter for where it came from; a coupon code you type also counts against your account, so codes cannot be guessed in bulk. Each counter is filed under a code scrambled with a secret key from your IP address or account, never under the address or account itself. It holds nothing else, and it is deleted within about 10 minutes of its window ending — a minute for an address, an hour for an account.

How long we keep things

• While you have an account, we keep your data until you delete it.
• Crash reports: until newer ones replace them (at most 500 are kept).
• Nookly AI: each saved chat for 30 days after its last message; the usage log (no message text) for 13 months; a reply you reported for 90 days; a device's notification address until you turn notifications off or sign out there; the note of which notifications were sent for 40 days.
• Abuse-limit counters: about 10 minutes after their one-minute or one-hour window.
• Emails you send us: in our mailbox until we delete them, or sooner if you ask.
• If you delete your account: 7 days (the cancellation window), then permanently. Payment records are kept longer, in anonymised form, because tax law requires it.
• If your Premium subscription ends: your account moves to the free Freemium plan and keeps syncing everything. Only Nookly drops to the free allowance, and nothing is deleted.

Age

NookMarker accounts are for adults (18+). The free, no-account version stores nothing with us apart from anonymous crash reports, so the data sections of this policy simply do not apply to it.

If something goes wrong

In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as the DPDP Act requires, and tell you plainly what happened and what we are doing about it.

Changes to this policy

If this policy changes materially, we will email account holders before the change takes effect and update the date at the top of this page.

Contact

[email protected] — full details, including our business address and grievance officer, are on the Contact page.