Privacy Policy

We collect only what's necessary to make Tobuko work: — Your email address and encrypted password (via Supabase Auth) — The bookmarks you save: URL, title, tag, and which collection they belong to — Collection names and whether they are marked private We do not collect browsing history, page content, analytics about how you use the app, or any data beyond what you explicitly save.

Your data is used exclusively to provide the Tobuko service: — To authenticate you and keep your session active — To store and sync your bookmarks across devices — To enforce private collection access (server-side) We do not use your data for advertising, profiling, or any third-party purpose.

Private collections are protected at the database level, not just visually in the UI. When a collection is marked private, its bookmarks are excluded from API responses until the correct account password is verified in the same session. Even if someone accessed your account token, private bookmark contents would not be returned without re-authentication.

Your data is stored on Supabase (supabase.com), a hosted PostgreSQL service. Supabase stores data in data centers within the region selected at project creation. We do not sell, share, or transfer your data to any third parties.

You can delete individual bookmarks and collections at any time from within the app. To permanently delete your account and all associated data, contact us at the email below. We will process deletion requests within 30 days.

Tobuko uses a session cookie to keep you signed in. We do not use advertising cookies, tracking pixels, or any third-party analytics scripts. We do not use Google Analytics or similar services.

If we make material changes to this policy, we will update the date below and, where appropriate, notify you by email. Continued use of Tobuko after changes constitutes acceptance of the updated policy.

If you have questions or requests related to your privacy, contact us at: privacy@tobuko.github.io