Privacy

Markli is a private bookmark sync extension for Chrome and Microsoft Edge. It syncs only the managed bookmark folder configured in the extension options page.

Data Used By The Extension

• Browser bookmarks under the configured managed folder, normally bookmarker/.
• Extension settings stored in Chrome or Edge extension storage, including endpoint, authentication mode, active role filters, sync interval, prune setting, push setting, and last sync or push status.
• A browser-managed passkey session cookie for markli.app.
• Optional Cloudflare Access service-token values only when the advanced service-token fallback mode is selected.
• Optional connected-app profile and repository metadata when a user authorizes a provider such as GitHub or Hugging Face. OAuth credentials are encrypted before storage.
• Optional public RSS or Atom feed URLs and recent article metadata when a user follows a feed. Read status is stored privately in the user's Markli account.

Data Transfer

The extension sends managed bookmark data to https://markli.app to sync bookmarks across browsers.

When a user connects an external provider, Markli exchanges OAuth credentials directly with that provider and retrieves only the profile and repository metadata covered by the approved scopes. Connected items remain live launcher data unless the user explicitly saves one as a Markli bookmark.

When a user follows a public RSS or Atom feed, Markli periodically requests that feed and stores recent article titles, links, summaries, publication dates, and read status. Markli blocks feed URLs that point to local or private-network addresses.

If an administrator enables AI cleanup review, selected bookmark titles, URLs, folders, and tags may be sent to the configured AI provider to generate cleanup suggestions. AI suggestions are reviewed before changes are saved.

When Cloudflare Radar enrichment is available, Markli sends only the bookmark hostname to Cloudflare to retrieve domain category and popularity signals. Bookmark titles, paths, query strings, tags, and ownership details are not sent to Radar.

Data Sale And Advertising

Markli does not sell user data or use user data for advertising. It contacts an external provider only when a user explicitly connects that provider or when Markli refreshes that authorized connection.

User Control

Users can choose which role folders are kept on each device. Users can disable push from a device, sign out of the Markli passkey session in the web app, or remove the extension from Chrome or Edge.