Privacy Policy – Foldmark

Foldmark is a Chrome extension for capturing highlighted text, organizing it into folders and workflow states, and exporting saved bookmarks. Foldmark is designed to be local-first: your bookmarks, notes, folders, and preferences stay on your device by default.

1. What Foldmark Stores Locally

Foldmark uses chrome.storage.local to store data needed for the extension to work, including:

• saved bookmarks and highlighted text
• bookmark titles, notes, workflow state, and folder assignments
• folders and folder preferences
• app settings and preferences
• recoverable deleted items, drafts, and retention settings
• optional AI configuration stored locally on-device for preview or future AI-related settings
• a local anonymous analytics queue and analytics state

This local data is used to provide the extension’s features and is not uploaded by default.

2. What Foldmark Does Not Collect for Analytics

Foldmark does not send the following as part of analytics or product telemetry:

• your name, email address, or account identity
• passwords or authentication credentials
• payment or financial information
• raw highlighted text or bookmark body content
• full browsing history
• AI API keys

Foldmark only accesses the active page, the user’s selected text, and related page metadata needed for the save and capture features the user invokes.

3. Anonymous Analytics

Foldmark includes optional anonymous usage analytics to help improve the product.

Default behavior

• Remote analytics upload is disabled by default.
• You must explicitly opt in before analytics are uploaded.
• You can disable remote analytics upload at any time in Settings.

What analytics are used for

Anonymous analytics are used to improve capture reliability, search and organization features, and overall product usability and quality.

What analytics may include

• anonymous user ID
• session ID
• event timestamps
• event names such as bookmark creation, editing, searching, exporting, processing, and settings changes
• non-sensitive product metadata such as counts, flags, workflow view, folder IDs, and durations

If a source reference is included, it is limited to non-sensitive metadata such as a domain name where applicable.

What analytics do not include

• raw highlighted text
• bookmark content
• personal identity information
• API keys

Local analytics queue

Foldmark may store anonymous analytics events locally on your device even when remote upload is disabled. This local queue supports batching, retry behavior, and analytics status/debugging inside the extension. Local queueing does not itself send data to a server.

Remote analytics upload

If you enable analytics upload:

• events are sent over HTTPS
• uploads are batched
• the current backend endpoint is a Supabase Edge Function
• failed uploads are retried with exponential backoff

Analytics retention

• remote analytics events are retained in the backend for up to 90 days
• local analytics queue data remains on your device until uploaded or until extension storage is cleared

4. AI Features

Foldmark includes AI-labeled preview surfaces in the current codebase, such as metadata suggestion and summary entry points.

Current build behavior

As of April 18, 2026, the current public extension branch does not complete live AI requests from those user-facing actions. In this build:

• AI preview actions currently return placeholder or "coming soon" responses
• bookmark content is not transmitted to a third-party AI provider through the shipped UI flows
• optional AI configuration may still be stored locally on-device for future or developer-managed use

Future AI behavior

If a future release enables live AI requests, Foldmark may send limited bookmark-related data to a user-configured AI provider, such as:

• selected or saved bookmark text
• bookmark title
• source URL
• available folder names or folder IDs used to suggest organization

If that behavior is shipped, Foldmark will update this policy and corresponding Chrome Web Store disclosures to reflect the active data flow.

5. Third-Party Services

Foldmark may optionally communicate with third-party services only for the following product features:

• Supabase-hosted analytics ingest for user-enabled anonymous analytics upload

The current public extension build does not send bookmark content to an AI provider through the shipped UI flows. Third-party services are not used for advertising or data brokerage.

6. Data Ownership and User Control

You retain control of your data.

• bookmarks and notes are stored locally by default
• you can export your library
• you can delete bookmarks, notes, and folders
• you can clear extension storage to remove local data
• you can disable analytics upload at any time

7. Security

Foldmark uses the following privacy and security practices:

• local-first data storage
• minimal data collection
• no remote code loading by design
• HTTPS for network communication when optional network features are used
• user-triggered AI transfer only
• opt-in remote analytics upload only

8. Changes to This Policy

This policy may change as Foldmark evolves. Material changes will be reflected by updating the date at the top of this document.

9. Contact

For privacy questions or requests:

Product: Foldmark
Email: contact@foldmark.app

10. Compliance Statement

Foldmark is intended to align with:

• Chrome Web Store Developer Program Policies
• Chrome Web Store disclosure and limited-use requirements
• privacy-by-design and data minimization principles