Privacy Policy
Last updated: 2026-08-20
The short version
Your bookmarks never leave your computer. MarkVault archives them to local storage and to a folder you choose. There is no account, no sync server and no upload. We could not read your archive even if we wanted to — there is nowhere for it to arrive.
What the extension stores, and where
While you browse X, the extension reads the responses the page itself loads and stores the bookmarked posts in your browser’s local database (IndexedDB), and — if you grant a folder — writes them to that folder as plain JSONL files. Stored content includes post text, author, timestamps, media URLs, folder membership, and the raw API response the post came from.
These files are yours. You can open, search, copy, back up or delete them without us being involved in any way.
What we receive
By default: nothing. The extension makes no requests of its own.
If you explicitly opt in during onboarding, the extension sends a small number of anonymous funnel counters (such as “backfill completed”) so we can tell whether the product works. These carry no bookmark content, no post text, no identifiers tied to your X account. The complete list is shown to you before you decide, and you can turn it off at any time.
Permissions we deliberately do not request
MarkVault does not request the cookies permission or the webRequest permission. It therefore cannot read your login session. It holds a host permission for x.com only, which is what lets it observe the bookmark responses the page loads.
This website
markvault.app is a static site hosted on Cloudflare Pages. Our host processes standard request logs (IP address, user agent, requested URL) for security and abuse prevention. We do not run analytics, advertising or tracking cookies on this site.
Payments
Purchases are handled by our payment provider, which acts as merchant of record and is the seller for the transaction. They collect the billing details necessary to process your payment and to meet tax obligations. We receive order and licence information — we never see your full card details.
Mail to support@markvault.app is forwarded to a private inbox and kept only as long as needed to handle your request.
Your rights
Because we hold no archive of yours, deleting your data means deleting your local files — entirely under your control. For correspondence and order records held by us or our payment provider, write to support@markvault.app and we will action access, correction or deletion requests.
The launch waiting list
If you give us your email address to be told when MarkVault launches, that address is held by us and by EmailOctopus, the service that sends the emails. We use it for exactly two things: telling you when MarkVault is available, and occasional short updates about the product. It is never sold, rented, or used for anything else.
You have to confirm by clicking a link before we can email you again. An address that is never confirmed never hears from us.
Every email carries a one-click unsubscribe link. Unsubscribing takes effect immediately and you never have to ask us for it.
This is separate from your bookmark archive. Your bookmarks are never uploaded anywhere, whether or not you join the list — see the top of this page. Joining the list tells us an email address and nothing else about you.
We keep the list until launch plus roughly six months of follow-up, or until you unsubscribe, whichever comes first.
The form is protected by Cloudflare Turnstile, which checks that a submission came from a person rather than a script. It does not track you across sites.
Children
MarkVault is not directed to children under 16.
Changes
If this policy changes materially, the date at the top changes and the change is described in the extension’s release notes.