Bookmark Cleaner Open cleaner

Privacy boundary

Your bookmark data stays in your browser

Privacy-first does not mean pretending a hosted website has no infrastructure. It means drawing a strict boundary around the information that matters: your bookmark library is processed locally and is never included in operational traffic measurement.

Version 1.0 · Last updated: September 7, 2026

Who controls personal data

ZHENG RUIPENG, an individual operating Bookmark Cleaner, is the data controller for personal data handled by Bookmark Cleaner. Privacy requests can be sent to support@bookmarkcleaner.com.

Never uploaded

Protected bookmark data

  • • The selected bookmarks.html file
  • • Bookmark URLs, domains, titles, and saved dates are never uploaded to Bookmark Cleaner
  • • Folder names, paths, and hierarchy
  • • Duplicate groups and review choices
  • • Backup and cleaned export contents

Site operations

Aggregate hosting metrics

Cloudflare serves the website and entitlement API and may process IP address, request time, user agent, requested path, status, security signals, and performance data needed to deliver and protect the service. Bookmark Cleaner never adds bookmark content to page paths, queries, logs, or metric properties.

Current analytics status

Plausible Analytics is used to measure aggregate traffic to public informational pages. It is not included in the browser extension. Plausible may process ordinary web-request metadata and page-view information needed to provide analytics. See Plausible's privacy policy and data policy.

Bookmark Cleaner does not place bookmark file names, URLs, titles, domains, folder names, duplicate results, link-health results, cleanup selections, activation credentials, or file contents into analytics events or properties. The product does not use session recording or analytics based on browser form fields.

Pro license and local storage

Commercial Pro activation sends an activation key and a random installation identifier to Bookmark Cleaner's Cloudflare entitlement endpoint. It returns a short-lived signed lease and checks only whether the license is active, refunded, revoked, or over its installation limit. No bookmark URL, title, domain, folder, file, or cleanup choice is included. Signed leases are verified locally and normally refreshed after 24 hours, with a bounded offline validity period.

The activation key, signed lease, Pro rules, optional reminder date, and ID-only review decisions may be stored in localStorage in this browser profile. Deactivating Pro or clearing browser data removes them.

The Pro backup vault is separate and always requires an explicit user action. Vault entries contain the full backup HTML and remain in this browser profile's IndexedDB until the user deletes them or clears site or extension data. They are not uploaded. Cleanup and migration reports contain aggregate counts only.

Optional broken-link checks

Link Health is available in the browser extension only. You may check one domain with narrower optional site access, or explicitly start an all-eligible-links scan that requests broader optional HTTP/HTTPS site access. Requests go directly from your browser to destination websites; Bookmark Cleaner does not proxy bookmark URLs through its own server. Private-network, local, credential-bearing, and likely sensitive links are skipped.

Destination websites can receive the requested URL, IP address, user agent, and ordinary request metadata. Results are classified as Healthy, Confirmed Broken, or Needs Review and never trigger automatic deletion. Mark as OK and Ignore warning decisions may be stored locally in IndexedDB so the same warning is not immediately shown again; verified OK decisions expire after 30 days and ignored warnings remain until you undo them or clear browser data.

Payments and Waffo Pancake

Public production checkout is not yet open. Waffo Pancake is being integrated as the Merchant of Record for paid Pro purchases. When you choose to buy Pro, Waffo may collect and process your name, email, billing details, order, tax, device, fraud-prevention, and payment information to complete the transaction, issue a receipt, provide payment support, and meet legal obligations. Full card details are handled by Waffo and its payment providers; Bookmark Cleaner does not receive or store them. See Waffo's Privacy Policy.

Bookmark Cleaner receives only the order and license information needed to verify payment, issue and recover a Pro key, apply refunds, and provide support. Test-environment transactions must use test data.

Retention

  • • Bookmark files, exports, backup-vault entries, and local preferences remain on your device until you delete them or clear site or extension data.
  • • A verified-OK Link Health disposition expires after 30 days; ignored warnings remain until you undo them or clear local data.
  • • An inactive installation slot may be released after 60 days. Checkout reservations expire after 45 minutes, and paid-key recovery remains available for 48 hours after a confirmed order.
  • • Active license and order records remain while needed to validate the license, handle refunds, prevent abuse, and meet applicable legal obligations.

Your choices and rights

Depending on where you live, you may request access, correction, erasure, restriction, portability, or objection, and may withdraw consent where consent is the basis for processing. Email support@bookmarkcleaner.com; we aim to respond within 30 days, subject to identity verification and applicable law. You control local bookmark and backup data directly through your browser.

Bookmark Cleaner is intended for people aged 18 or older. It is not directed to children, and we do not knowingly collect children's personal data.

Security and changes

Factual safeguards include HTTPS/TLS in transit, hashed activation, invite, and installation identifiers, AES-GCM encryption for short-term paid-key recovery, and Cloudflare-managed secrets. No online service can guarantee absolute security.

We may update this notice when the product, processors, or law changes. Material changes will be identified by a new version and date and, where appropriate, a prominent notice before they take effect.