Onemark
Onemark Privacy Policy
Draft. Effective date: to be confirmed when Jetto account sync launches.
Onemark is a Chrome extension that organizes your bookmarks, open tabs and downloads, and can optionally sync your bookmarks across Chrome profiles when you sign in with a Jetto account.
The short version
- Bookmarks stay on your device until you sign in to sync. By default the extension sends the developer no data of any kind: not your bookmarks, not your browsing, not analytics.
- If you sign in to sync, your bookmarks (titles, URLs and folder structure) and the names of the Chrome profiles you sync are sent to Onemark's sync service, run by the developer (Jetto) on Cloudflare. Bookmarks are encrypted in transit over HTTPS and encrypted at rest by Cloudflare, where the sync service stores them. The sync service can read them, so the developer technically could. The developer does not look at, analyze, sell or share them, and does not use them for advertising or AI training. Your open tabs, downloads and browsing history are never synced.
- You can delete your synced data at any time from Onemark's options page, or by emailing hello@jetto.ai (see Sync (optional)).
- Onemark contains no ads, no analytics, no tracking. The only other transfer is optional error reporting, off until you turn it on (see Error reports (optional)).
What Onemark accesses, and why
| Data | Why | Where it goes |
|---|---|---|
| Bookmarks | The core feature: listing, editing, organizing and archiving bookmarks. | Stays in Chrome; sent to Onemark's sync service only if you sign in to sync. |
| Jetto account (email, sign-in tokens) | Signing in to sync and checking your plan. | Sign-in tokens are stored in Chrome's local extension storage on your device; your account ID, email and plan are also used by Onemark’s sync service. Card details are handled by Stripe and never reach Onemark. |
| Open tabs (title, URL, state) | The side panel lists your tabs and matches them to bookmarks. | Never leaves your device. |
| Recently closed tabs | The undo-close feature restores tabs you just closed. | Never leaves your device. |
| Browsing history | The history view queries recent pages when you open it. | Queried on demand, not stored, never leaves your device. |
| Downloads (file name, status) | The downloads view lists and manages your downloads. | Never leaves your device. |
| Website access (optional, one site at a time) | Adjusting the volume of a single tab. The first time you change the volume on a site’s tab, the side panel shows an “Allow this site” button; only after you press it does Chrome ask you to allow that site and its same-domain embedded frames (for example, a player embedded in a meeting page). Nothing is requested at install. | Onemark only scales the volume of audio and video on pages you allowed. It does not read, record or transmit page content. Volume levels are remembered per site name in Chrome's local extension storage on this computer, are never synced or sent to any server, and you can remove a single site or clear them all in the options page. |
| Settings | Your preferences for the extension. | Stored in Chrome's local extension storage on your device. |
| Error reports (optional, off by default) | Lets the developer find and fix crashes and unexpected errors. | Sent to the developer through Sentry only if you turn them on in the options page. See Error reports (optional). |
Sync (optional)
Sync is off until you sign in with a Jetto account in Onemark's options page. Once signed in, each Chrome profile uploads its bookmarks to Onemark's sync service and downloads changes made in your other profiles.
What is stored: your Jetto account ID and email, bookmarks (title, URL, folder structure), profile IDs and names, profile enrollment and last-sync times, and plan and subscription status. Sync does not send your open tabs, downloads or browsing history.
Who can access it: Bookmarks are encrypted in transit over HTTPS and encrypted at rest by Cloudflare, where the sync service stores them. The sync service can read them, so the developer technically could. The service reads them only to sync them back to your own profiles. The developer does not look at them, except when you ask for help with a sync problem or when required by law.
Plans: syncing up to 2 profiles is free. Onemark Pro (US$1.99 per month or US$12 per year) syncs any number of profiles. Payments are processed by Stripe under its own privacy policy: https://stripe.com/privacy. Your card details go to Stripe and never reach Onemark. See the Terms of Service for billing, renewal and refunds.
Deleting it: "Delete synced bookmarks" in the options page deletes your synced bookmarks and profile names from the sync service immediately. Account, subscription and profile enrollment records are retained to manage your plan and profile limits. Existing profiles stop syncing until you choose to restart sync on each one. Bookmarks already in Chrome remain on your devices. You can also email hello@jetto.ai from the address you sign in with and ask for your synced data to be deleted. If an account sends no sync requests for 12 months, its synced bookmarks are deleted automatically. Deleting synced data does not cancel a subscription; manage that from "Manage subscription".
Moving from an earlier version: earlier versions of Onemark synced through a file in your own GitHub account. On first sign-in, Onemark merges that file's last copy into your bookmarks, then deletes the GitHub token from your browser. The file itself is left untouched in your GitHub account; delete it there if you no longer want it.
Error reports (optional)
Error reporting is off by default. If you turn on Send crash and error reports in Onemark's options page, uncaught errors in the extension are sent to the developer through Sentry, an error-monitoring service, so they can be fixed. Each report contains:
- the error message and stack trace, which show where in Onemark's code the error happened; every web address in them is replaced with [url] before the report is sent
- the Onemark version, whether it is a development or store build, and which part of Onemark the error happened in (background, side panel, manager, new tab or options page)
- your browser and its version, your operating system and its version, and the device type (for example, Mac)
- an approximate location (country and city) that Sentry derives from the connection; your IP address is not stored
Reports never include your bookmarks, tabs, browsing history, downloads, your sign-in tokens, or your IP address.
Sentry processes the reports for the developer under its own privacy policy: https://sentry.io/privacy/. Turning the option off in the options page stops sending immediately, with no restart needed.
Data retention and removal
Uninstalling the extension removes everything Onemark stores on your device: your settings, your sign-in tokens and the extension's local caches.
Your bookmarks are not part of that. They live in Chrome's own bookmark tree, so anything Onemark filed there stays in Chrome after the extension is gone, including the archive folders it created. Delete those folders in Chrome if you no longer want them.
Uninstalling does not delete your synced copy on the sync service. Delete it from the options page before uninstalling, or email hello@jetto.ai; otherwise it is deleted automatically after 12 months without sync requests.
If you turned on error reports, reports already sent stay in Sentry for 90 days and are then deleted automatically; uninstalling the extension or turning the option off does not delete them sooner. Reports carry no user identifier, so the developer cannot tell which ones came from you. To have reports removed sooner, email hello@jetto.ai with the approximate time the errors happened, and reports from that period will be deleted.
Changes
If this policy changes, the updated version will be published at this same address with a new effective date. Material changes will be noted in the extension's release notes.
Contact
Questions about this policy: hello@jetto.ai