Locus Sync

All your saved posts, one place. Locus Sync aggregates the bookmarks and saved posts from your existing accounts on X (Twitter) and Instagram into a single, searchable dashboard — without requiring you to hand over your passwords or authorize any third-party OAuth app. HOW IT WORKS When you browse a supported platform in Chrome while logged in to your own account, Locus Sync quietly observes the authentication headers your browser was already sending to that platform. It stores those session credentials in your browser's local extension storage (chrome.storage.local) — on your device only, never uploaded anywhere. When you click "Sync" in the popup, the extension uses those credentials to call the platform's own API — exactly as your browser would — and fetches the list of posts you have saved on that platform. The resulting bookmark metadata (post text, author, URL, thumbnail reference, timestamps) is then synced to your private Locus Sync account. SUPPORTED PLATFORMS - X (Twitter) — your Bookmarks and Bookmark Folders - Instagram — your Saved posts and Collections FEATURES - Unified feed of all your saved content across platforms - Search across all platforms at once - Organize into folders and add personal labels or notes - Auto-sync on a schedule so your dashboard stays current - Works with your existing accounts — no password entry, no extra logins PRIVACY — THE MOST IMPORTANT THING TO UNDERSTAND Your platform credentials (session cookies, auth tokens, CSRF tokens) are stored in chrome.storage.local — local, encrypted browser storage on your own device. They are NEVER sent to our servers, never included in any network request to the developer's infrastructure, and never accessible from any web page. The bookmark content itself (post text, author names, post URLs, thumbnail metadata, engagement counts) IS synced to a private Supabase database associated with your Locus Sync account, protected by per-user Row Level Security. Only you can access your data. We do not sell your data, share it with advertisers, or use it for any purpose other than powering your dashboard. Locus Sync reads only your own saved content. It does not post, like, follow, or take any action on any platform on your behalf. PERMISSIONS EXPLAINED - Storage: holds your session credentials on-device and your Locus Sync login session - Web request: passively reads auth headers from your own browser sessions on each platform (the only way to capture credentials without asking you to paste tokens manually) - Tabs: opens the correct platform page when you trigger a sync, and detects when one is already open - Alarms: powers the background auto-sync schedule Full permission details are in the extension's privacy policy: https://studiolocus.app/privacy IMPORTANT: Locus Sync syncs and organizes your bookmarks — it is a sync and organization tool. Platform names (X, Instagram) are used descriptively to identify the sources of your own saved content.