Overview
Link Crypt is built to be a modern Pocket replacement with a focus on privacy. We collect only what we need to operate the service and never sell your data.
Data we collect
- Account: your email address to authenticate via Supabase Auth.
- Content: the links you save, their metadata (title, description, images, author), and your tags. Tags are scoped to your account.
- Page metadata: when using our Chrome extension, we extract metadata from web pages you choose to save (Open Graph tags, meta descriptions, page titles). This data is only collected when you explicitly save a link.
- Usage analytics: anonymous usage data through Google Analytics and PostHog to improve the product. PostHog runs in cookieless mode: it records which pages and buttons are used, with all on-page text and link addresses masked, so it never sees the links, titles, tags or notes you save. You can block analytics with browser settings or extensions.
How we use your data
- To provide and maintain the service (store links, tags, preferences).
- To secure your account and prevent abuse.
- To understand aggregate usage and improve features.
Chrome Extension
Our Chrome extension:
- Authentication: Shares your session with the web app by reading authentication tokens from Link Crypt pages (getlinkcrypt.com). No credentials are stored in the extension itself.
- Page access: Only accesses the current page when you explicitly save a link. We do not track your browsing history or access pages in the background.
- Permissions: The extension requests minimal permissions: active tab access (to save current page), storage (for authentication tokens), and scripting (to extract page metadata).
- Data storage: Authentication tokens are stored locally in Chrome's secure storage. All saved links are stored in our Supabase database, not in the extension.
AI assistant connectors
You can connect an AI assistant (Claude, ChatGPT, or any MCP-capable client) to your Link Crypt account through our MCP server.
- What it reads and writes: only what your assistant explicitly asks for — searching, listing, or reading your links and tags, and, if you allowed changes, saving, editing, tagging, or deleting them.
- Where requests pass through: tool calls and results travel through the AI vendor you're using (for example Anthropic or OpenAI), the same way any tool call does. Link Crypt only sees the calls your assistant actually makes.
- How it's stored: connecting an assistant mints an API key tied to your account, visible and revocable anytime from Preferences → Connected AI assistants.
- Retention: a revoked or disconnected key is deactivated immediately and can no longer be used to reach your account.
Questions about a connected assistant? Contact [email protected].
Cookies
We use cookies/local storage for session authentication and preferences (including theme). Google Analytics may set its own cookies. You can disable analytics cookies in your browser. PostHog sets no cookies and stores nothing on your device.
Data retention
We retain your content while your account is active. You can request deletion of your account and data at any time.
Security
We use Supabase (Postgres with Row-Level Security) to isolate your data by user. While no service is perfectly secure, we continuously improve our security posture.
Third-party services
- Supabase: We use Supabase for authentication and data storage. Supabase is SOC 2 Type II compliant and provides enterprise-grade security. Data is stored in secure PostgreSQL databases with Row-Level Security (RLS) policies ensuring users can only access their own data.
- Google Analytics: We use Google Analytics for anonymous usage tracking. You can opt-out using browser settings or extensions.
- PostHog: We use PostHog (servers in the United States) for anonymous product analytics in cookieless mode. It does not set cookies, does not build a profile of you, does not record sessions, and receives page paths without search terms. It is never given your saved links or account details.
Your rights
- Access and export your data.
- Request correction or deletion.
- Withdraw consent for analytics.
- Uninstall the Chrome extension at any time (this will remove stored authentication tokens from your browser).
Contact
For privacy questions or data requests, contact us at [email protected].