Privacy policy

Last updated 12 October 2026

XMarks keeps your bookmarks in your browser. There is no XMarks account and no XMarks server, so we never receive your bookmarks, notes or anything else about you. This page lists what the extension stores, where, and the few times it uses the network.

What XMarks stores on your device

Your library is kept in your browser’s IndexedDB storage, on your device only:

  • The posts you save: their text, the author’s name and handle, the date, links in the post, and the web addresses of the author’s avatar and any images or videos. The images themselves are not copied.
  • What you add: categories, tags and notes.

Your settings (save mode, where the save button sits, accent color, theme, card density, and whether auto-categorize is on) are kept in Chrome’s extension storage. If you are signed in to Chrome with sync turned on, Chrome copies these settings between your browsers through your Google account, as it does for any extension. Your bookmarks and notes are not synced.

XMarks also remembers which onboarding tips you have seen, on this device only.

When XMarks uses the network

  • Images from X. The dashboard shows avatars, images and videos by loading them from X’s servers, the same way X does when you view the post. X can see that request, as it would if you opened the post on X.
  • The auto-categorize model. Auto-categorize is off until you turn it on. The first time you do, XMarks downloads a model (about 45 MB) from Hugging Face (huggingface.co) and your browser caches it. That download contains none of your bookmarks; Hugging Face sees an ordinary file request from your IP address. After that, categorizing runs entirely on your device.
  • Links you open. “View tweet” and other links open the post on X in a new tab.

Nothing else is sent anywhere. XMarks has no analytics, no tracking, no ads and no crash reporting.

What XMarks does on X

The extension only runs on x.com and twitter.com. There it adds the save button to posts, and reads a post’s content from the page when you save it. When you click Sync Bookmarks, it scrolls your Bookmarks list on X and saves each post it finds. It does not read your messages, change your account, or post anything for you.

Permissions

storage, unlimitedStorage
To keep your library and settings in your browser, however large the library gets.
Access to x.com and twitter.com
To add the save button and Sync Bookmarks to X, and to read the posts you choose to save.

Your control

  • Export your whole library, or selected posts, to a JSON file at any time from the dashboard.
  • Delete any post, category or note in the dashboard.
  • Removing the extension deletes everything it stored in your browser. Export first if you want to keep a copy.

We don’t sell, share or transfer your data, because we never have it.

This website

This site is hosted on GitHub Pages. It uses no cookies and no analytics. If you pick an accent color, your browser remembers it for this site. GitHub may log visitors’ IP addresses for security; seeGitHub’s privacy statement.

Changes and contact

If this policy changes, the new version will be posted here with a new date. The extension is open source, so you can check all of this in the code on GitHub. Questions?Open an issue.