PrivateMarks - Encrypted Bookmark Vault

# Privacy Policy for PrivateMarks (私密书签保险箱) *Last updated: 2026-09-21* **PrivateMarks** ("we", "our", or "the Extension") is committed to protecting your privacy. This Privacy Policy describes how PrivateMarks handles your data and privacy when you use our browser extension. --- ## 🛡️ Core Privacy Principle: Zero-Knowledge & Local-First **PrivateMarks is designed from the ground up as a zero-knowledge, 100% client-side privacy tool.** - **No Remote Servers**: We do not operate any external tracking servers, analytical databases, or backend APIs. - **Zero Telemetry / Tracking**: We do not collect, transmit, share, or sell any personal data, usage statistics, browsing history, or bookmark contents. - **Local End-to-End Encryption**: All bookmark titles, URLs, tags, and notes are encrypted on your device using the **Web Crypto API (PBKDF2 with 100,000 iterations + AES-256-GCM 256-bit)** before being written to storage. --- ## 🔑 Permissions & How Data is Handled | Permission | Purpose & Data Handling | | :--- | :--- | | **`storage`** | Used to store encrypted bookmark vault data (`pm_vault`), cryptographic verifiers, and user preferences locally on your browser (`chrome.storage.local`). If you choose to enable Chrome Cloud Sync, encrypted ciphertext chunks are synced via Google's official `chrome.storage.sync` service. Decryption keys are stored only in memory (`chrome.storage.session`) and cleared immediately upon locking. | | **`bookmarks`** | Used exclusively for the optional "Import from Chrome Bookmarks" feature. It allows you to select and migrate bookmarks from Chrome's plaintext bookmark bar into the encrypted vault, and optionally remove the original plaintext copies to eliminate traces. | | **`activeTab`** | Used only when you explicitly invoke "Quick Save Current Tab" (via toolbar icon, shortcut, or context menu) to read the active tab's title, URL, and favicon icon for saving into the vault. | | **`sidePanel`** | Used to display the bookmark tree manager in the browser's side panel. | | **`alarms`** | Used to periodically check user inactivity timeout in the background to automatically trigger security auto-lock. | | **`contextMenus`** | Used to add convenient "Add Page / Link to PrivateMarks" options to the right-click context menu. | --- ## ☁️ Optional Chrome Cloud Sync If you enable the **Chrome Sync** feature in Settings: - Bookmark data is **always encrypted locally with AES-256-GCM** using your master password before being uploaded. - Google's sync servers only receive uncrackable encrypted ciphertext chunks. Neither Google nor any third party possesses the cryptographic key required to view your bookmarks. - You can disable cloud sync at any time in the settings. --- ## 🚫 Third-Party Disclosures & Analytics We do **NOT** use any third-party analytics libraries (such as Google Analytics, Mixpanel), crash reporters, or advertising networks. --- ## 📬 Contact Us If you have any questions or concerns regarding this Privacy Policy or data security, please contact: - **Developer**: LA-Star - **Email**: [lastar.wang@gmail.com](mailto:lastar.wang@gmail.com) - **GitHub**: [https://github.com/LA-Star/bookmark-plugin](https://github.com/LA-Star/bookmark-plugin) --- # 隐私政策 (中文版) *最近更新日期：2026-09-21* **PrivateMarks（私密书签保险箱）** 致力于全面保护您的个人数据与隐私。本隐私政策说明了本扩展程序在您使用过程中的数据处理方式。 --- ## 🛡️ 核心隐私准则：零知识与纯本地运行 **PrivateMarks 是一款从底层架构就遵循“零知识 (Zero-Knowledge)”和“本地优先 (Local-First)”原则的安全工具。** - **无外部服务器**：我们不设立任何收集用户数据的外部后端服务器、分析接口或第三方追踪平台。 - **零遥测与零追踪**：我们绝不收集、上传、共享或出售您的任何个人信息、浏览历史或书签内容。 - **本地高强度加密**：所有的书签标题、网址、标签和私密备注均在您的本地浏览器内使用 **Web Crypto API (PBKDF2 100,000次迭代 + AES-256-GCM 256位)** 认证加密后存储。 --- ## 🔑 权限使用说明 - **`storage` (存储权限)**：用于在浏览器本地存储经过 AES-256-GCM 加密后的密文数据及偏好设置。内存密钥仅在解锁状态下暂存于 `chrome.storage.session`，锁定后立即彻底抹除。 - **`bookmarks` (书签权限)**：仅用于用户主动发起的“从 Chrome 原生书签导入”功能，协助将公开书签迁移进加密保险箱并清除痕迹。 - **`activeTab` (当前活动标签页)**：仅在您主动点击“快速加密收藏”时，获取当前网页的标题、网址与图标。 - **`sidePanel` (侧边栏)**：用于在浏览器侧边栏常驻展示私密书签资源管理器。 - **`alarms` (定时器)**：用于后台定时检测空闲超时时间以执行自动安全锁定。 - **`contextMenus` (右键菜单)**：提供右键快速添加网页/链接至保险箱的便捷入口。 --- ## 📬 联系方式 如有任何隐私相关疑问，欢迎联系开发者： - **邮箱**：[lastar.wang@gmail.com](mailto:lastar.wang@gmail.com) - **GitHub 仓库**：[https://github.com/LA-Star/bookmark-plugin](https://github.com/LA-Star/bookmark-plugin)