Privacy Policy

Last updated: September 11, 2026

What information linqlo collects, and what it is used for. What the browser extension reads — and what it does not — is covered under “What the browser extension accesses”.

Scope

This policy applies to the following products offered by linqlo (linqlo.app).

  • The web app (linqlo.app)
  • The browser extension (Chrome and Firefox)
  • The mobile app

External sites you save links to are governed by their own operators' privacy policies.

Information we collect

We collect the following information when you create and use an account.

  • Account information — name, email address, email verification status, profile image URL
  • Authentication information — your password, stored as a hash that cannot be reversed. If you sign in with Google, the account identifier and tokens we receive from Google
  • Session information — session token, IP address, browser user agent, expiry
  • Saved bookmarks — URL, page title, excerpt, your notes, tags, collections, thumbnail and favicon URLs, and the time saved
  • Saved page copies — sanitized HTML, extracted page text, source URL and capture time when you explicitly start a capture
  • Workspace information — workspace name, members and their roles
  • Billing information — your plan, purchase history, subscription status and an identifier for the workspace receiving the purchase. Card numbers are handled by the payment provider and never reach linqlo

For thumbnails and favicons we store only the URL. We never copy the image files themselves.

Analytics and ads

The web app uses Google Analytics and Microsoft Clarity to understand usage and improve the service only after you allow it. Google Tag Manager, Google Analytics, and Microsoft Clarity are not loaded before that choice.

  • The type of screen viewed — collection IDs, public identifiers, search terms, query strings, and URL fragments are removed
  • General device, operating system, and browser categories
  • Referring source and interactions such as registration, login, store links, and pricing-plan buttons
  • Click and scroll patterns in Microsoft Clarity recordings and heatmaps — screen text, input, images, and saved content are never recorded because Strict masking is enabled

On public share pages (URLs starting with /s/), we show Google AdSense ads to visitors who are not signed in. Ads fall under the same choice as analytics: the AdSense script is not loaded before you allow it. Google may use cookies in your browser to serve and measure those ads. No ads appear once you are signed in, and we show no ads at all to visitors from the European Economic Area, the United Kingdom, or Switzerland — whatever their choice.

We do not send your email address, user ID, saved URLs or names, notes, collection names, workspace names, or anything you enter. You can allow or reject analytics and ads at any time from Analytics and ad preferences at the bottom of the page. Rejecting removes Google Analytics and Microsoft Clarity cookies, stops tracking, and shows no ads.

What the browser extension accesses

The browser extension never builds up a record of your browsing. It reads a page's content only at the moment you save it, though it does send the URL of the page you are on to show the saved badge. Here is exactly what it sends, and when.

  • When you save — it reads the URL of the open tab, the page title, and the URLs of the Open Graph thumbnail and the favicon, then sends them to the linqlo server
  • When it shows the saved badge — while you are signed in, it asks the server whether the URL of the open tab has already been saved. The queried URL is neither stored nor logged (the answer is kept inside the extension for 30 seconds)
  • While signed out — it makes no requests to the server at all

The extension does not inject a persistent content script into pages. It runs a script in the page only when it needs to read metadata for a thumbnail. It contains no advertising or analytics code.

How we use information

We use the information we collect only for these purposes.

  • Providing features such as saving, organizing, searching, and sharing bookmarks
  • Fetching pages you select and providing access to and search across their saved HTML and text
  • Verifying identity, signing you in, and preventing abuse
  • Delivering and billing the features included in your plan
  • Verifying your email address, resetting your password, and sending important notices
  • Investigating faults and improving the service

We never hand the contents of your bookmarks to anyone for ad targeting, and we do not sell them. Ads on a public share page are selected by Google, which may look at the published contents of that page and at information stored in your browser.

Sharing with third parties

We use the following processors to the extent needed to run the service. We also share information with services you explicitly connect, as described below, or when disclosure is legally required.

  • Cloudflare, Inc. — application runtime and delivery, sending authentication email, Browser Rendering of external pages you select, and storage of saved HTML and text
  • Turso (Chiselstrike, Inc.) — database
  • Polar Software Inc. — payment processing for paid plans on the web
  • RevenueCat, Inc. — purchase verification, access management and billing analytics using iOS/Android purchase history and workspace identifiers
  • Apple and Google — payment processing and management of subscriptions purchased through their app stores
  • Google LLC — authentication when you sign in with Google, web-app analytics only when you allow it, and ad delivery on public share pages (Google AdSense)
  • Microsoft Corporation — strictly masked web-app interaction analytics only when you allow it

We may disclose information to the extent required when we receive a legally valid request.

When you connect an AI service such as ChatGPT or Codex (OpenAI) through MCP, we store the authorization and selected workspace needed to maintain that connection. Within the permissions you grant, the connected service can receive saved URLs, titles, excerpts, notes, tags, collection details, and workspace name, role, plan, usage, and limits. Record identifiers are included to let the service find or update the correct item. Your name and email address are shared only when you authorize account-information access.

Read permissions allow retrieval from the selected workspace. Write permissions also allow bookmark, collection, and tag changes; some tools can delete collections or tags or publish a collection when requested. You can disconnect the integration in the connected service. Information already received by that service is handled under its own privacy policy and retention or deletion controls. Contact us if you need help revoking access.

When you create a Zapier or Raycast integration key, we store its hash, selected workspace, permissions, and expiration. The connected service can receive bookmark URLs, titles, excerpts, notes, tags, timestamps, collection information, and workspace name, identifier, and write-access status. Private collections and trash are excluded. Connections with save permission can add bookmarks. You can revoke keys in App integrations settings. Information already received by a connected service is governed by that service’s privacy policy.

Retention and deletion

We keep your information for as long as your account exists. Deleting a bookmark moves it to the trash; emptying the trash makes it unrecoverable.

Deleting your account deletes the information tied to it. Complete removal from backups takes some additional time.

Your rights

You can do the following with your own information.

  • Review and correct your account information from settings
  • Take your saved bookmarks with you using the export feature
  • Delete your account
  • Make any other request for disclosure or restriction available to you under applicable law

Send requests to info@bitpluse.jp. We act on them once we have confirmed your identity.

Security

All traffic is encrypted with TLS. Passwords are stored as hashes and never in plain text. Access to data is limited to what running the service requires.

Children

This service is not intended for anyone under 13. If we learn that we have collected information from a child under 13, we delete it promptly.

Changes to this policy

If we change this policy we will update this page and revise the last-updated date. We will notify you by email about significant changes.

Contact

For questions about this policy, contact us at info@bitpluse.jp.