Who controls personal data
ZHENG RUIPENG, an individual operating Bookmark Cleaner, is the data controller for personal data handled by Bookmark Cleaner. Privacy requests can be sent to support@bookmarkcleaner.com.
Privacy boundary
Privacy-first does not mean pretending a hosted website has no infrastructure. It means drawing a strict boundary around the information that matters: your bookmark library is processed locally and is never included in operational traffic measurement.
Version 1.0 · Last updated: September 7, 2026
ZHENG RUIPENG, an individual operating Bookmark Cleaner, is the data controller for personal data handled by Bookmark Cleaner. Privacy requests can be sent to support@bookmarkcleaner.com.
Never uploaded
Site operations
Cloudflare serves the website and entitlement API and may process IP address, request time, user agent, requested path, status, security signals, and performance data needed to deliver and protect the service. Bookmark Cleaner never adds bookmark content to page paths, queries, logs, or metric properties.
Plausible Analytics is used to measure aggregate traffic to public informational pages. It is not included in the browser extension. Plausible may process ordinary web-request metadata and page-view information needed to provide analytics. See Plausible's privacy policy and data policy.
Bookmark Cleaner does not place bookmark file names, URLs, titles, domains, folder names, duplicate results, link-health results, cleanup selections, activation credentials, or file contents into analytics events or properties. The product does not use session recording or analytics based on browser form fields.
Commercial Pro activation sends an activation key and a random installation identifier to Bookmark Cleaner's Cloudflare entitlement endpoint. It returns a short-lived signed lease and checks only whether the license is active, refunded, revoked, or over its installation limit. No bookmark URL, title, domain, folder, file, or cleanup choice is included. Signed leases are verified locally and normally refreshed after 24 hours, with a bounded offline validity period.
The activation key, signed lease, Pro rules, optional reminder date, and ID-only review decisions may be stored in localStorage in this browser profile. Deactivating Pro or clearing browser data removes them.
The Pro backup vault is separate and always requires an explicit user action. Vault entries contain the full backup HTML and remain in this browser profile's IndexedDB until the user deletes them or clears site or extension data. They are not uploaded. Cleanup and migration reports contain aggregate counts only.
Link Health is available in the browser extension only. You may check one domain with narrower optional site access, or explicitly start an all-eligible-links scan that requests broader optional HTTP/HTTPS site access. Requests go directly from your browser to destination websites; Bookmark Cleaner does not proxy bookmark URLs through its own server. Private-network, local, credential-bearing, and likely sensitive links are skipped.
Destination websites can receive the requested URL, IP address, user agent, and ordinary request metadata. Results are classified as Healthy, Confirmed Broken, or Needs Review and never trigger automatic deletion. Mark as OK and Ignore warning decisions may be stored locally in IndexedDB so the same warning is not immediately shown again; verified OK decisions expire after 30 days and ignored warnings remain until you undo them or clear browser data.
Public production checkout is not yet open. Waffo Pancake is being integrated as the Merchant of Record for paid Pro purchases. When you choose to buy Pro, Waffo may collect and process your name, email, billing details, order, tax, device, fraud-prevention, and payment information to complete the transaction, issue a receipt, provide payment support, and meet legal obligations. Full card details are handled by Waffo and its payment providers; Bookmark Cleaner does not receive or store them. See Waffo's Privacy Policy.
Bookmark Cleaner receives only the order and license information needed to verify payment, issue and recover a Pro key, apply refunds, and provide support. Test-environment transactions must use test data.
Depending on where you live, you may request access, correction, erasure, restriction, portability, or objection, and may withdraw consent where consent is the basis for processing. Email support@bookmarkcleaner.com; we aim to respond within 30 days, subject to identity verification and applicable law. You control local bookmark and backup data directly through your browser.
Bookmark Cleaner is intended for people aged 18 or older. It is not directed to children, and we do not knowingly collect children's personal data.
Factual safeguards include HTTPS/TLS in transit, hashed activation, invite, and installation identifiers, AES-GCM encryption for short-term paid-key recovery, and Cloudflare-managed secrets. No online service can guarantee absolute security.
We may update this notice when the product, processors, or law changes. Material changes will be identified by a new version and date and, where appropriate, a prominent notice before they take effect.