Privacy Policy

Effective and last updated: July 24, 2026

This policy covers the Keepsake Chrome extension, the Keepsake web app at app.keepsaketab.com, and keepsaketab.com (together, "Keepsake," "we," "us"). It explains what we collect, why, and the choices you have.

What we collect

Category	What it includes
Account	Email address, password (stored as a salted hash, never in plain text), display name, avatar (optional)
Saved content	URLs, titles, descriptions, favicons, tags, folders, notes, full-page text extracted for search, screenshots, screen recordings, and highlights (the quoted text and its location on the page)
AI usage	See "AI features" below — handled differently depending on whether you use hosted AI or your own key
Billing	Your plan, subscription status, and a Stripe customer reference. Your card details are entered directly into Stripe and never reach our servers
Device & usage	Basic request logs (IP address, timestamp, action) kept briefly for security, abuse prevention, and troubleshooting

How Chrome extension permissions are used

Chrome requires every extension to disclose why it asks for each permission. Here is exactly what each one is for:

Permission	Why Keepsake needs it
Read and change data on all sites you visit	To let you save, capture, highlight, and use AI tools on any page you choose — this only activates when you use Keepsake on that tab, and we don't monitor pages you don't interact with
Tabs / active tab	To know the URL and title of the page you're saving
Scripting	To extract the readable text, let you highlight passages, and show the Quick Bar and selection tools on the page
Storage / unlimited storage	To keep your settings and a local cache of your library on your device for instant loading
Tab capture / desktop capture / page capture	To take screenshots and screen recordings when you explicitly choose to capture something
Downloads	To save exported files, recordings, or screenshots to your computer when you ask to
Context menus	To power the right-click "Save to Keepsake" option
Notifications	To alert you when a Living Bookmark (watched page) changes
Alarms	To periodically check pages you're watching, even when the extension isn't open
Web navigation	To detect when you've navigated to a page you already saved, so highlights and info stay in sync
Top sites / sessions	To power optional Home-screen shortcuts to sites you visit often
Clipboard write	To let you copy AI results or captured content with one click
Side panel	To show Keepsake in Chrome's side panel as an alternative to the popup

Keepsake does not read, log, or transmit your browsing activity in the background. Content is only collected when you actively save, capture, highlight, or otherwise act on a page.

AI features

Keepsake offers two distinct ways to use AI, and they are handled differently:

Your own API key (bring-your-own-key)

If you add your own API key for a provider (OpenAI, Anthropic, Google, or others we support), requests are sent directly from your browser to that provider using your key. Keepsake's servers do not see this traffic, and your key is stored only on your own device.

Hosted AI (Pro and Max plans)

If you use Keepsake's built-in AI without your own key, the relevant text (for example, a page summary request or a selection you asked us to rewrite) is sent to our AI provider, OpenAI, solely to generate that response. We also use Novita for audio transcription when you use recording features. We do not use your content to train AI models, and hosted AI use is metered against your plan's monthly allowance — never shared across accounts.

How we use data

To provide and sync your bookmarks, highlights, and settings across your devices
To process payments and manage your subscription (via Stripe)
To send transactional email — password resets, email verification, and new-sign-in alerts
To secure the service, prevent abuse, and enforce plan limits
To respond when you contact support

We do not sell your personal data, and we do not use it for third-party advertising.

Who we share data with

Stripe — payment processing. Stripe's own privacy policy governs the card data it collects directly from you.
OpenAI — only for hosted AI requests you initiate on a Pro or Max plan.
Novita — only for hosted audio transcription you initiate.
Our infrastructure providers — hosting, database, and email delivery, bound to protect your data and prohibited from using it for their own purposes.

Data retention and deletion

We keep your data for as long as your account is active. You can delete individual bookmarks, collections, or highlights at any time. To delete your entire account and all associated content, contact support@keepsaketab.com. Billing records required by law or for tax and accounting purposes may be retained after account deletion.

Your choices

Export your library at any time from Settings
Disable optional Chrome permissions (like page capture) in your browser's extension settings
Use your own AI key instead of hosted AI, or disable AI features entirely
Request a copy of, or the deletion of, your data by contacting us

Children's privacy

Keepsake is not directed at children under 13, and we do not knowingly collect personal information from them.

Security

We use industry-standard measures — encryption in transit, hashed passwords, and access controls — to protect your data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

Changes to this policy

We'll update the date at the top of this page when this policy changes, and post material changes here.

Contact us

Questions about this policy or your data: support@keepsaketab.com