Privacy Policy for FolderCharm
Effective date: September 29, 2026
FolderCharm ("we," "us," or "our") provides and sells the FolderCharm extension.
Contact FolderCharm Support.
Summary
FolderCharm accesses bookmark and current-tab information to perform the bookmark-saving features requested by the user. Your bookmark data is private and never sent to us. Bookmark titles, bookmark URLs, folder names, and browsing history are processed locally in the browser. If browser sync is enabled, Chrome or Edge may sync bookmark data through the user's browser account under that browser provider's settings and policies.
For trial and paid access, the extension transmits your email, a sign-in code,
a randomly generated installation identifier, session credentials, license
activation data, and entitlement requests to the FolderCharm licensing service
hosted by Cloudflare. Resend delivers sign-in codes; Stripe
processes payments. Your verified account receives one 14-day trial.
The public FolderCharm website uses Cloudflare Web Analytics to measure aggregate
page views, referring sites, countries, and page-performance metrics. Cloudflare
Web Analytics does not use cookies or local storage, does not fingerprint
visitors, and does not track individual visitors across websites. The analytics
beacon does not receive bookmark content, extension account credentials, license
keys, payment information, or email addresses.
Information processed locally
The extension processes the following information inside the user's browser profile:
- Current page title and URL when the user clicks the extension.
- Bookmark folders, saved bookmark titles, and saved bookmark URLs.
- The last selected destination folder.
- A license key entered by the user.
- Signed-in email, session credential, pending challenge identifier, and entitlement cache.
- Sign-in codes are entered temporarily and are not saved in extension storage.
Bookmark content is used only to display, search, detect duplicates, create folders, and save bookmarks. We do not transmit bookmark content to our servers or operate a separate bookmark-sync service.
Information sent to the licensing service
The extension sends only the information needed to administer the trial and subscription:
- A randomly generated installation identifier.
- A user-friendly browser/platform label and extension version used to identify
authorized installations.
- Trial start and expiration information.
- Email and a one-time code for account verification.
- Account/session identifiers for later sign-in and entitlement checks.
- A license key when the user initially links a purchase to the verified account.
- Subscription entitlement checks and activation timestamps.
- Authorized-installation first-seen, last-seen, deactivation, and security-audit
records.
- Basic request metadata normally processed by the hosting provider, such as IP address and request time.
The application uses the hosting provider's trusted client-IP header only for
rate limits. It stores short-lived keyed hashes of rate-limit buckets, not raw IP
addresses. A shared IP does not automatically revoke any account or paid license.
The licensing service does not require or receive bookmark titles, bookmark URLs, folder names, or general browsing history.
The optional Watch demo link opens a backend-controlled redirect to YouTube
only when clicked. It does not include bookmark information or an account token.
YouTube receives the normal connection information associated with visiting its
site and operates under its own privacy policy. Video URLs and current public
pricing are configuration data, not remotely downloaded extension code.
Website analytics
The public website loads the Cloudflare Web Analytics performance beacon from
static.cloudflareinsights.com. It reports aggregate page views, visits,
referrers, approximate country, page-load performance, and Core Web Vitals to
Cloudflare. Cloudflare states that Web Analytics does not use cookies or local
storage, does not fingerprint visitors, and does not collect or use visitors'
personal data for Web Analytics.
Website analytics are used only to understand which public pages and launch
channels are useful and to improve website performance. The beacon is not loaded
inside the FolderCharm extension and receives no bookmark data.
Payment information
Stripe processes checkout and payment information under Stripe's own privacy policy. We do not receive or store full payment-card numbers. We may receive Stripe customer, checkout-session, subscription, invoice, payment-status, and customer-email information required to administer the subscription and provide support.
How information is used
Information is used only to:
- Verify the account and enforce one 14-day full-feature trial without resetting it on reinstall.
- Prevent the same installation from creating trials under multiple emails, reject
known disposable-email domains for new accounts, and enforce the five-installation
account limit.
- Activate and validate Annual licenses.
- Process and administer annual subscriptions, including the USD $24 launch offer.
- Record accepted price terms, subscription price identifiers, five-year guarantee
dates, and renewal-price notifications; send transactional billing notices.
- Prevent obvious licensing abuse and investigate service failures.
- Provide customer support, refunds, and account assistance.
- Meet legal, tax, security, and fraud-prevention obligations.
We do not sell personal information or use extension data for advertising.
Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Sharing
Information may be shared with service providers that operate these features:
Resend receives the recipient email and sign-in message; Stripe processes payments;
Cloudflare hosts the licensing service and public website and
provides aggregate Web Analytics. We may also disclose information when required
by law or to protect users, the service, or our legal rights.
Retention
- Bookmark data remains in the browser profile and is controlled by the user. Chrome or Edge may sync it across the user's devices when browser sync is enabled.
- Account email and original trial dates are retained while the account exists,
including after trial expiry, to prevent repeated trials. Uninstalling or signing
out does not delete this account history.
- Codes expire after 10 minutes. Sessions expire after 90 days without authorized
use. Rate-limit buckets expire within 24 hours. Expired authentication/rate records
are removed on requests and by hourly cleanup.
- Authorized-installation and trial-claim history is retained with the account to
enforce trial and installation limits. Removal marks an installation inactive and
revokes its sessions; it does not delete billing records.
- Device-removal authorizations expire after five minutes and can be used only once.
Installation-specific support grants expire after no more than 10 days.
- The local entitlement cache is usable for less than 24 hours after the last
successful check, and never beyond the underlying entitlement or session expiry.
- Payment and transaction records may be retained as required for accounting, tax, fraud prevention, and legal compliance.
- Other inactive licensing/support records are reviewed for deletion or
anonymization after 24 months after the subscription or support relationship ends, subject to account-eligibility
enforcement and applicable retention obligations. Contact support for account deletion.
Security
Licensing requests use HTTPS. Initial activation verifies the signed-in email
against the Stripe Checkout Session. Codes, session tokens, installation IDs and
license keys are stored as keyed cryptographic hashes by the licensing service.
The extension stores its session credential locally to keep you signed in.
Access to production systems is restricted to authorized personnel and service providers.
User choices
Users may:
- Uninstall the extension at any time.
- Remove local extension data through the browser.
- Sign out to clear local account credentials. Signing out, trial expiry, or
revocation does not delete browser bookmarks or automatically cancel a subscription.
- Review authorized installations and remove an old installation after fresh email
verification.
- Open Your plan to view purchased pricing and terms. Use Billing & invoices
for Stripe billing management, or Cancel renewal to review the promotion-loss
warning before Stripe's final cancellation confirmation.
- Request access, correction, or deletion by contacting
Deletion requests may be subject to legal retention obligations.
Children
The service is not directed to children under 13 and is not intended to collect children's personal information.
Changes
Material changes will be disclosed in the extension, listing, or this policy before new data practices take effect when required.
Contact
FolderCharm
https://foldercharm.pages.dev/support.html