Privacy

keepthis.site is a personal bookmark manager. The whole product is designed to keep your reading list on your machine and out of any database we control. This page spells out exactly what data each piece of it touches.

The desktop app

The Mac app stores every pin in a local SQLite database under ~/Library/Application Support/kts.app/. It does not report telemetry, does not phone home for crash reports, and does not embed any third-party analytics or advertising SDK.

To capture page previews it spawns a headless Chromium that you either downloaded yourself from Settings or already had installed. That Chromium fetches each saved URL once — direct from the origin, with the same User-Agent string a normal browser would send. No image proxy or scraping service is involved.

The browser extension

The extension's only job is "save the current tab". When you click the toolbar button or pick the entry from a context menu, the extension reads:

It then POSTs that JSON to http://127.0.0.1:43215/, which is the local HTTP endpoint the desktop app exposes only on loopback. The bytes never leave your machine. The extension does not read tab content, does not run on any page (no content scripts), and the manifest's only host permission is the localhost endpoint above.

Sync (optional)

If you turn on sync, your devices talk directly to each other, peer-to-peer — there is no account, no sign-up, no email, and no server we run that holds your data. A passphrase you choose derives the encryption keys entirely on your device; every change is end-to-end encrypted with those keys before it leaves the device, and only your own devices (which share the passphrase) can decrypt it. We never see your bookmarks or your passphrase. If you lose the passphrase, the data is unrecoverable — by design.

The peer-to-peer transport uses public relay servers (operated by the iroh project) only to help your devices find and reach each other when a direct connection isn't possible. Those relays forward the same end-to-end-encrypted bytes; they cannot read them.

Cookies, tracking, analytics

None. Neither this website, the extension, nor the desktop app sets cookies for analytics, runs first- or third- party tracking, or sends pings to ad networks. The only HTTP requests this site makes from your browser are for the page you asked for, the favicons, and Google Fonts (Geist / Geist Mono).

Data deletion

All your data is local. To delete it, remove the app's data (delete the app, or its database under ~/Library/Application Support/kts.app/ on macOS), and sign out of sync (Settings → sign out) to clear the derived keys from the device's secret store. There is no server-side account to delete — we hold nothing.

Contact

Questions, concerns, takedown requests — write to [email protected].

last updated
2026-06-07
jurisdiction
Spain (GDPR applies)
data controller
José Galisteo