Privacy Policy
Last updated: 1 August 2026
NookMarker ("NookMarker", "we") is a bookmark manager operated by Talha Khan, a sole proprietor based in India. This policy covers the website (nookmarker.com), the app (app.nookmarker.com), and the NookMarker browser extension. It is written in plain English and describes what the software actually does.
The short version
- Freemium, without an account: nothing leaves your device. Bookmarks, notes, to-dos, boards, activities, subscriptions, search history, and widgets are stored only in your browser (localStorage and IndexedDB). We cannot see them.
- With a free account (Basic): part of your content is stored on our servers. Signing in turns on cloud backup up to a set number of items per feature, so that part is stored in Mumbai, India, and follows you across devices. Anything above those numbers never leaves your browser. Signing out stops any further upload; deleting your account removes the stored copy.
- With a Premium account, the same applies with no limit — all of the content you sync is stored on our servers in Mumbai, India.
- We show no ads, sell no data, and set no tracking cookies.
What we store when you create an account
Accounts exist only for Premium. When you sign up, we store:
- Sign-in details — your email address and a hashed password (we never see the password itself). If you sign in with Google: your name, email, profile photo, and Google account ID, as shared by Google.
- Profile — an optional display name.
- Your content — the bookmarks (address, title, icon address), folders, project boards, to-dos, notes, activities, and subscription entries you sync.
What we never collect
Your phone number. Your date of birth. Card or bank details — payments are processed by Razorpay, and your card data goes to them, never to us. Your location — the weather widget uses a city name you type in yourself, not GPS. Your browsing history — we never see where you go, only the individual pages you deliberately save (see The browser extension for exactly what a save sends).
The browser extension
The NookMarker extension adds one button to your toolbar. It has no login of its own and stores nothing on your device.
- It reads nothing until you click it. There is no background monitoring, and nothing of ours runs on the pages you browse. When you press the button it reads that one page, once, and stops — nothing is left behind on the page and nothing keeps running afterwards. Until you press it, it cannot read the page you are on, and it can never read any other page you have open.
- The one thing it checks about your other tabs is whether NookMarker itself is already open in one of them, so it can use that tab instead of opening a new one every time. It is granted this for app.nookmarker.com alone, and it learns nothing about any other site you have open.
- When you do click, it reads that one page's address and title, the site's own icon, and a short description of the page — the text you have selected if you selected any, otherwise the description the page publishes about itself. Then it opens NookMarker with the "New bookmark" box already filled in. You still choose the folder and press Save — nothing is saved by the click alone, and every filled-in box can be edited or cleared before you do.
- Where that goes. Those four things travel to app.nookmarker.com, so they reach our servers in the ordinary way any web address does. Once you save, the bookmark follows the same rule as every other one: on the free plan it stays in your browser; with Premium it syncs.
- We do not sell or share this, or use it for advertising, and we use it for nothing except saving the bookmark you asked us to save.
Separately, a small number of invited beta testers help fill a shared list of website icons, so that sites the usual icon services don't cover still show a real icon for everyone. When one of them saves a bookmark, three things may be added to that list: the site's icon image, the site's hostname (example.com, never the full page address), and which account contributed it. That last part means we can see that a beta tester bookmarked something on that site — so if you are a beta tester, that is what you are sharing. The list never holds a page address, a page title, or anything at all about ordinary accounts, which only read from it and never write to it.
Where your data lives
On Supabase, hosted on Amazon Web Services in Mumbai (ap-south-1), India. Your data does not leave India in the normal operation of the service.
Services we rely on
| Service | What it receives | Why |
|---|---|---|
| Supabase | Your account and synced content | Database, sign-in, and backend hosting |
| Razorpay | The name, contact, and payment details you enter at checkout (per Razorpay's own privacy policy) | Payment processing |
| Cloudflare | Standard connection logs (IP address, pages requested) and anonymous, cookieless visit counts | Hosting this website; Cloudflare Web Analytics (no cookies, no cross-site tracking, no personal profiles) |
| Google sign-in | Only if you choose it: confirmation of your Google identity | Optional sign-in method |
| Google favicon service | The app may request a site's icon from Google; Google then sees that domain request coming from your IP address | Bookmark icons |
| Open-Meteo | The city name you type into the weather widget | Weather forecast |
| Tally | Only if you open Settings → Feedback: the form is loaded from Tally, and anything you submit goes to them. It is sent with your email address, your plan, your browser version and screen size, and which tab you had open — so a reported bug can be traced. We do not read your bookmarks or notes into it. The form also lets you optionally attach a screenshot or short video; if you do, whatever that file happens to show is uploaded to Tally too. | The feedback and bug-report form |
No ad networks, no data brokers, no social-media pixels.
Cookies and local storage
The app keeps its data in your browser's localStorage and IndexedDB — that is the app working, not tracking. We set no advertising or third-party tracking cookies, which is also why you see no cookie banner.
Your rights
Under India's Digital Personal Data Protection Act, 2023 (and, for visitors from elsewhere, laws such as the GDPR), you can:
- See and correct your data — all of it is visible and editable inside the app.
- Export your synced data from the app.
-
Delete your account — in the app under Settings →
Profile → Delete account. You confirm it with your password (or, for
Google sign-ins, a code we email you), and we then email you the date.
Your account is marked immediately and permanently deleted
7 days later; signing in at any point during those 7 days
lets you cancel with one click, and nothing is removed until they are up.
You can also email
[email protected] from your
account address and we will do it for you.
Deletion removes your account and everything synced to the cloud. Two things deliberately remain: payment records, which we must keep for tax and accounting but which are stripped of any link to you, and any website icons you contributed to the shared icon store, which contain no personal data and are anonymous. The copy of your bookmarks stored in your own browser is yours: on the browser you delete from, NookMarker clears it for you. Any other browser you were signed in on is signed out, and the copy there stays until you remove it — Settings → Data → Remove data from this browser, or clear your browser data. We do not currently run scheduled database backups; if we enable them in future, any backup copy would be cleared within our hosting provider's backup retention window. - Complain — grievance details are on the Contact page: acknowledgment within 48 hours, resolution within one month.
- Nominate another person to exercise these rights on your behalf, by emailing us.
How long we keep things
- While you have an account: for as long as you keep it.
- If you delete your account: 7 days (the cancellation window), then permanently. Payment records are kept longer, in anonymised form, because tax law requires it.
- If your Premium subscription ends: syncing stops, and your cloud copy is retained for at least 30 days so you can export it or resubscribe. After that, it is scheduled for permanent deletion. The data on your own device is yours and is never touched.
Age
NookMarker accounts are for adults (18+). The free, no-account version stores nothing with us, so the data sections of this policy simply do not apply to it.
If something goes wrong
In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as the DPDP Act requires, and tell you plainly what happened and what we are doing about it.
Changes to this policy
If this policy changes materially, we will email account holders before the change takes effect and update the date at the top of this page.
Contact
[email protected] — full details, including our business address and grievance officer, are on the Contact page.