Summary, before the detail
- Brovvser stores what you save — page titles, URLs, tags, notes — in your browser. Nothing leaves your device unless you turn on sync.
- Sync is optional and points at a server you choose. That's usually a server you or your organization runs, not one operated by the extension's developer.
- No analytics, no trackers, no advertising, and no data sold or shared with anyone else.
1 What we collect
Brovvser only records what you explicitly ask it to save: a page's title and URL, plus any tags or notes you type in. It never reads browsing history, page content, or activity beyond the tab you click "Save" on.
Always, and only on this device
Every save is written to your browser's built-in bookmarks and to the extension's local storage, so the popup and options page work without a network connection. This local copy never leaves your browser on its own.
Only if you connect a sync server
The options page lets you optionally connect Brovvser to a server — typically self-hosted with the docker-compose.yml that ships alongside this extension. If you do:
- The email address and password you use to create an account on that server, so it can identify you. The server stores your password as a bcrypt hash, never in plain text.
- The same bookmark data described above (title, URL, tags, notes), sent to that server so it can be saved in its MySQL database and read back on your other devices.
2 Why each permission exists
| Permission | What it's used for |
|---|---|
bookmarks | Creates, searches, and removes entries in your browser's native bookmark manager when you save or delete one in Brovvser. |
storage | Keeps your local bookmark cache, tags, notes, and (if you connect one) your server address and login session on-device. |
contextMenus | Adds the "Save to Brovvser" right-click menu item. |
activeTab | Reads the title and URL of the tab you're currently on when you click Save — nothing more. |
| Optional host access | Requested only at the moment you log in or register on a sync server, and only for that server's own domain — so the extension can send it your bookmark data over HTTPS or HTTP. |
3 Where data lives
Locally, data sits in your browser's own storage, sandboxed to this extension the same way any browser extension's storage is. If you enable sync, requests to your server are authenticated with a signed token (JWT) that expires after 30 days, sent as a standard Authorization header — not a cookie, and not shared with any site you visit.
The extension itself doesn't run any server, doesn't phone home to its developer, and doesn't include analytics or crash-reporting libraries of any kind.
5 Your controls
- Delete anytime — removing a bookmark in the popup or options page deletes it locally, from your native bookmarks, and from the sync server if connected.
- Export — the options page can export everything as a JSON file you keep.
- Disconnect — logging out in the options page stops all syncing; previously synced data stays on the server until you delete it there.
- Uninstall — removing the extension deletes its local storage. Data already sent to a sync server is governed by that server's own retention, since it's now stored in that operator's database.
6 Children's privacy
Brovvser is a general-purpose utility not directed at children, and it does not knowingly collect information from anyone under 13.
7 Changes to this policy
If this policy changes, the "Effective" date at the top of this page will be updated. Material changes will also be reflected in the extension's store listing.
8 Contact
Questions about this policy or how Brovvser handles data can be sent to [email protected].