Clipstead Privacy Policy

Understand how Clipstead, the privacy-first bookmark manager and notes app, protects your data with local-first options and minimal collection.

At Clipstead, privacy isn’t just a feature—it’s our foundation. As a privacy-forward bookmark manager and notes app, we prioritize your data security with local-first options and minimal collection. This Privacy Policy explains how we handle your information when you use our website, extension, apps, and services (the “Service”). We aim to keep it straightforward so you know exactly what to expect.

Last Updated: September 21, 2025

1. Information We Collect

We collect only what’s necessary to provide a seamless experience:

Account Data: Email and password (hashed) for login.
Usage Data: Bookmarks, URLs, titles, excerpts, notes, highlights, tags, and collections you create.
Device Info: IP address, browser type, and device details for sync and troubleshooting.
Analytics: Anonymous usage stats (e.g., feature interactions) to improve the Service—no personal tracking.

We don’t collect sensitive data like payment details (handled by third-party processors) or browsing history outside your saved content.

2. How We Collect Information

Directly from You: When you sign up, save bookmarks, or add notes.
Automatically: Via cookies or local storage for session management and offline sync.
From Devices: Sync data across your browser, desktop, and (future) mobile apps.

3. How We Use Your Information

Your data powers Clipstead’s core features:

Syncing bookmarks and highlights across devices.
Enabling search, reader mode, and organization tools.
Improving the Service through aggregated, anonymized insights.
Sending essential emails like password resets or updates.

We never sell your data or use it for targeted ads.

We share data only when necessary:

Service Providers: With trusted partners like Neon (for database hosting) or Vercel (for deployment) under strict confidentiality.
Legal Requirements: If required by law, subpoena, or to protect rights.
Business Transfers: In case of merger or acquisition, with notice to you.

No sharing with marketers or third parties for their own purposes.

5. Data Storage and Security

Local-First: Data is stored on your device by default; cloud sync is optional and encrypted.
Cloud Sync: Uses end-to-end encryption with Postgres on Neon—only you can access your content.
Security Measures: We use JWT auth, secure protocols, and regular audits to protect against breaches.

Retention: We keep your data as long as your account is active. Deleted items are removed promptly.

6. Your Privacy Rights

You control your data:

Access, export, or delete your information via account settings.
Opt out of non-essential emails.
For EU/UK users (GDPR): Request data portability or erasure—contact us.
California residents (CCPA): Opt out of data sales (we don’t sell anyway).

To exercise rights, email clipstead@gmail.com.

7. Children’s Privacy

Clipstead isn’t for kids under 13. We don’t knowingly collect data from children. If we learn of such data, we’ll delete it immediately.

8. International Data Transfers

If you’re outside the US, your data may be transferred to US servers. We comply with applicable laws like GDPR for adequate protection.

9. Cookies and Tracking

We use essential cookies for functionality (e.g., auth). No tracking cookies or pixels for ads. You can manage cookies via browser settings.

10. Changes to This Policy

We’ll update this Policy for new features or laws, notifying you via email or in-app. Continued use means acceptance.

11. Contact Us

For privacy questions, reach clipstead@gmail.com. We’re here to help with your bookmark manager privacy concerns.

Thank you for trusting Clipstead with your web content. We’re building a more private internet, one clip at a time!