Privacy Policy
Last updated: 24 July 2026
NookMarker ("NookMarker", "we") is a bookmark manager operated by Talha Khan, a sole proprietor based in India. This policy covers the website (nookmarker.com), the app (app.nookmarker.com), and the NookMarker browser extension. It is written in plain English and describes what the software actually does.
The short version
- Freemium, without an account: nothing leaves your device. Bookmarks, notes, to-dos, boards, activities, subscriptions, search history, and widgets are stored only in your browser (localStorage and IndexedDB). We cannot see them.
- With a Premium account, the content you choose to sync is stored on our servers in Mumbai, India, so it can follow you across devices.
- We show no ads, sell no data, and set no tracking cookies.
What we store when you create an account
Accounts exist only for Premium. When you sign up, we store:
- Sign-in details — your email address and a hashed password (we never see the password itself). If you sign in with Google: your name, email, profile photo, and Google account ID, as shared by Google.
- Profile — an optional display name.
- Your content — the bookmarks (address, title, icon address), folders, project boards, to-dos, notes, activities, and subscription entries you sync.
What we never collect
Your phone number. Your date of birth. Card or bank details — payments are processed by Razorpay, and your card data goes to them, never to us. Your location — the weather widget uses a city name you type in yourself, not GPS. Your browsing history — we only know the pages you deliberately save.
Where your data lives
On Supabase, hosted on Amazon Web Services in Mumbai (ap-south-1), India. Your data does not leave India in the normal operation of the service.
Services we rely on
| Service | What it receives | Why |
|---|---|---|
| Supabase | Your account and synced content | Database, sign-in, and backend hosting |
| Razorpay | The name, contact, and payment details you enter at checkout (per Razorpay's own privacy policy) | Payment processing |
| Cloudflare | Standard connection logs (IP address, pages requested) and anonymous, cookieless visit counts | Hosting this website; Cloudflare Web Analytics (no cookies, no cross-site tracking, no personal profiles) |
| Google sign-in | Only if you choose it: confirmation of your Google identity | Optional sign-in method |
| Google favicon service | When our own icon store does not have a site's icon, the app may request it from Google; Google then sees that domain request coming from your IP address | Bookmark icons |
| logo.dev | Domain names of certain bot-protected sites, requested from our server, not tied to your account | Icons for sites that block icon fetching |
| Open-Meteo | The city name you type into the weather widget | Weather forecast |
No ad networks, no data brokers, no social-media pixels.
Cookies and local storage
The app keeps its data in your browser's localStorage and IndexedDB — that is the app working, not tracking. We set no advertising or third-party tracking cookies, which is also why you see no cookie banner.
Your rights
Under India's Digital Personal Data Protection Act, 2023 (and, for visitors from elsewhere, laws such as the GDPR), you can:
- See and correct your data — all of it is visible and editable inside the app.
- Export your synced data from the app.
- Delete your account — in the app under Settings → Profile → Delete account, or by emailing [email protected] from your account email. Deletion completes within 30 days. We do not currently run scheduled database backups; if we enable them in future, any backup copy would be cleared within our hosting provider's backup retention window.
- Complain — grievance details are on the Contact page: acknowledgment within 48 hours, resolution within one month.
- Nominate another person to exercise these rights on your behalf, by emailing us.
How long we keep things
- While you have an account: for as long as you keep it.
- If your Premium subscription ends: syncing stops, and your cloud copy is retained for at least 30 days so you can export it or resubscribe. After that, it is scheduled for permanent deletion. The data on your own device is yours and is never touched.
Age
NookMarker accounts are for adults (18+). The free, no-account version stores nothing with us, so the data sections of this policy simply do not apply to it.
If something goes wrong
In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as the DPDP Act requires, and tell you plainly what happened and what we are doing about it.
Changes to this policy
If this policy changes materially, we will email account holders before the change takes effect and update the date at the top of this page.
Contact
[email protected] — full details, including our business address and grievance officer, are on the Contact page.