Privacy Policy
Last updated October 1, 2026
HelloLink is a personal bookmarking app. This page explains what it stores about you, why, and how to remove it. The short version: your library is private to you, it isn't sold or shared, and you can delete everything from Settings at any time.
What we store
- Account details: your email address, display name and password. Passwords are hashed by our authentication provider and never visible to us.
- Your library: the links you save, with the title, description, site name and preview image read from each page, plus your tags, collections, favourites, archive and trash.
- Browser connections: a record of each browser you connect the extension from. Only a hash of the connection token is stored.
The browser extension
When the extension is connected, it sends the address of the tab you are viewing to HelloLink so the toolbar icon can show whether that page is already in your library. These checks are not saved to your account.
When you save a page that has no preview image of its own, the extension takes a screenshot of the visible part of the tab and stores it as the link's preview. Preview images are served from an unlisted address so they can be shown in your library; anyone who has that exact address can open the image.
The extension reads nothing else from your pages and nothing from your other tabs, and it only talks to HelloLink.
How pages are read
To build a card for a saved link, HelloLink's server visits that address and reads its public metadata. Site icons are loaded from Google's favicon service, which receives the domain of each saved link.
Analytics and cookies
We use Serverboid to count visits to the site in aggregate: pages viewed, referrer, browser and country. It does not see the contents of your library.
HelloLink sets cookies only to keep you signed in. No advertising cookies are used.
Who processes your data
HelloLink runs on Vercel (hosting) and Supabase (database, authentication and file storage), which may process data outside your country. We don't sell your data or share it with anyone else, and we only disclose it if the law requires us to.
Your choices and rights
You can edit your name and email, and remove links, tags and browser connections, at any time. Deleting your account from Settings permanently erases your account and everything in it, including preview images. Deletion is immediate and can't be undone.
Under data protection laws such as Brazil's LGPD and the EU's GDPR, you can ask what we hold about you, ask for a copy or a correction, or ask us to delete it. Email madebydut@gmail.com.
Changes
If this policy changes in a way that matters, we'll update the date above and let signed-in users know.