Privacy Policy
Last updated: October 11, 2026
Privacy policies are usually hard to read, so this one says plainly what keepsake keeps, why, and who else touches it.
Keepsake is run by Onclick Cooperative Inc. It is a paid archive of the pages you bookmark, and the archive is the product, so we have no reason to do anything with your data except keep it for you.
What we keep, and why
What you give us
- Your account. Your email address, which is how you sign in and how we reach you about your account, and a password if you set one.
- Your bookmarks. Every address you save, with the title, tags, notes, and read-later flag you give it.
- Your imports. A Pinboard export you upload is read once to create your bookmarks, and only the bookmarks it creates are kept.
- Your payments. Paid plans go through Stripe, which handles your card; we keep only the reference Stripe gives us and your plan.
- Your messages. Whatever you tell us when you write to us.
What an archive holds
When you save a page, keepsake makes a private copy of it: the readable text, a PDF of the whole page, a thumbnail, the page's original HTML, and the images on it, copied in rather than linked. That copy is stored under your account and nobody else's.
The browser extension reads a tab only when you click its button, and keeps nothing in your browser but the app's address and its own key. A page you save from it with Save this tab's copy is kept as your tab showed it, which can include what you were signed in to see, such as a page behind a login or a paywall. That page may hold your own personal details or other people's, so treat what you save as you would any private copy, since it stays as private as the rest of your archive.
What we collect automatically
- Fetches on your behalf. Our servers open every address you save to capture it, and check it again about once a month to tell you whether the original is still there. These requests come from Cloudflare's network, not from your browser, so the sites you save never see your address or your cookies.
- API usage. When you use the API, we count your calls by account and by operation, so we can apply rate limits and see which parts of the API are used.
- Request logs. Our servers record each request in Cloudflare's logs, which expire on their own after a few days.
- Abuse protection. Our gateway records the IP address of a client that probes for files no site of ours has, or that keeps going past the rate limit, with the path and browser it sent. A rate-limit ban lapses after a day and a probe ban after a week, while an address that probes repeatedly is added to a blocklist in Cloudflare's firewall that does not lapse on its own.
What comes from sign-in providers
If you sign in with Google, GitHub, or Discord, that provider tells us your email address and whether it has verified it, and we create your account only for a verified address.
We have no advertising, no tracking pixels, and no analytics scripts on the site or in the app.
What we promise about your archive
- Yours alone. Every archive belongs to your account and no one else's, there is no public profile, and nothing is shared by accident.
- Never served raw. A page's own code is kept but never run, and you read its text and its PDF from a separate address that carries no cookies.
- Nothing phones home. Images are copied into the archive, so opening a page you kept never tells the original site that you read it.
Who else handles your data
We do not sell your personal information, and we share it only with the providers that run keepsake for us:
- Cloudflare runs all of keepsake: the servers, the database, the file storage for your archives, the browser that captures your pages, the email that sends your sign-in links, and the logs. Cloudflare's privacy policy
- Stripe processes payments for paid plans. Stripe's privacy policy
- Google, GitHub, and Discord take part only when you choose to sign in with them.
We also disclose information when the law requires it, and if keepsake changes hands, your data moves with it under this policy.
How long we keep it
We keep your bookmarks and archives for as long as your account is open. When you delete a bookmark, its archived copies are deleted from storage and its records from the database.
When you close your account, any paid plan is cancelled first, and then the account is deleted at once with everything it saved: your bookmarks, archives, files, and search index. Stripe keeps the payment records the law requires it to keep.
Your choices and rights
- See and correct. Your bookmarks, tags, and notes are yours to view and edit in the app at any time, and the account page shows your email and lets you change your password; to change your email, write to us.
- Delete. You can delete any bookmark and its archive from the app.
- Close your account and take your data. Your account page exports everything as one file and closes the account, which deletes it and what it saved.
Depending on where you live, you may have more rights over your data. If you are in the European Economic Area or the United Kingdom, you can ask us to access, correct, delete, restrict, or port your data, object to how we use it, withdraw a consent you gave, and complain to your local data protection authority. If you live in California, Texas, or another US state with a privacy law, you can ask to know, correct, and delete what we hold about you, and we will not treat you differently for asking. We do not sell or share your personal information for advertising, so there is nothing to opt out of.
We process your data to provide the service you pay for, to keep it secure and free of abuse, and to meet our legal obligations.
Cookies
Keepsake sets one cookie when you sign in, which keeps you signed in and is needed for the app to work. We set no cookies for tracking or advertising, and the address your archived files are served from sets none at all.
Children
Keepsake is not for anyone under 18, and we do not knowingly keep information about them. If you believe a child has an account, write to us and we will delete it.
Where your data lives
Cloudflare runs keepsake on its global network, so your data may be processed outside the country you live in, including in the United States.
Changes to this policy
When we change this policy, we post the new version here and update the date at the top.
Contact
Onclick Cooperative Inc Email: privacy@onclick.coop