Vanity is a browser-based new tab and bookmark organization app designed to help users organize bookmarks, customize their browser experience, and keep their browsing workflow cleaner.

What data we collect
Depending on how you use Vanity, we may process the following categories of data.

Account data
If you create an account or sign in, Vanity may process:

Email address
Display name or nickname, if you provide one
Authentication provider information
Basic account identifiers provided by our authentication provider
Session and sign-in state
Multi-factor authentication status and factor metadata
Subscription, license, or plan status
Vanity currently supports sign-in using:

Email and password
Google
GitHub
Discord
Bookmark and organization data
Vanity may process:

Bookmark titles
Bookmark URLs
Folders and folder structure
Tags, labels, and categories
Notes or labels you add
Bookmark-related preferences and organization settings
Bookmark sync settings and bookmark ID mappings used for browser bookmark integration
Customization and preference data
Vanity may process preferences such as:

Theme and accent settings
Greeting style
Clock style and clock settings
Layout preferences
Weather unit and weather widget settings
Widget settings and display preferences
Recent pages widget mode
Background and personalization settings
Quick capture and current page data
If you use Vanity’s quick capture features, Vanity may process:

The title of the active tab
The URL of the active tab
The timestamp of capture
Weather and location-related data
If you use Vanity’s weather features, Vanity may process:

A weather location you search for or save
Weather data associated with that location
Temperature unit preference
Vanity does not collect precise device GPS location through native device APIs. Weather is based on locations you search for or save.

Payment and license data
If Vanity offers paid plans or Pro features, Vanity may process limited payment or license-related data, such as:

License key
License activation status
Subscription or purchase status
Billing email
Customer or order ID
Invoice or payment confirmation information, where required
Vanity does not directly store full payment card details.

Communication data
If you contact us, we may process:

Your email address
Your message content
Support request details
Any information you choose to include
Technical, security, and diagnostics data
To keep Vanity secure and functioning properly, we may process limited technical data such as:

IP address
Browser type
Device or extension environment information
Error logs
Crash or exception data
Security-related logs
Date and time of access or events
Data stored locally
Vanity is designed with a local-first approach.

Based on the current app implementation, much of your Vanity data is stored directly in your browser or extension storage, including data stored through:

Browser local storage
Browser extension local storage, where available
This may include:

Bookmarks and folders
Tags and organization settings
Quick-save data
Widget preferences
Greeting, clock, weather, and layout settings
Local license key state
Saved weather location and cached weather data
Bookmark sync settings and browser bookmark ID mappings
Locally stored data may remain on your device until you delete it, clear browser or extension storage, uninstall the extension, or use Vanity’s local deletion or wipe tools.

We cannot access data that remains only in your local browser or extension storage unless a specific feature sends it to one of our service providers.

Data stored in your account
Vanity currently uses account-based authentication through Supabase.

Vanity does not store your bookmark library in a Vanity cloud database by default. Bookmark and customization data are stored locally in your browser or extension storage and can be associated with your signed-in profile on that device.

Data that may be stored in or associated with your account includes:

Email address
Authentication provider information
User ID or account identifier
Nickname or account profile metadata
MFA-related account state
License or subscription-related state
Sign-in and session state handled by our authentication provider
Browser bookmark sync
If you enable bookmark sync or import/export features, Vanity may read bookmarks from your browser, create or update bookmarks in your browser’s bookmarks system, and maintain internal mappings so Vanity items stay linked to browser bookmark items.

This browser bookmark sync is separate from cloud storage and is implemented as integration with browser bookmark APIs, not as server-side bookmark hosting by Vanity.

How we use your data
Provide and maintain Vanity
Create and manage user accounts
Allow sign-in and authentication
Support Google, GitHub, Discord, and email sign-in flows
Store and apply your preferences
Provide bookmark organization features
Support bookmark import, export, and browser bookmark sync
Support quick capture of the current page
Provide weather and background-related features
Process licenses, upgrades, subscriptions, or payments
Send transactional emails
Send password change or security-related notifications
Respond to support requests
Improve app performance and reliability
Detect abuse, fraud, errors, or security issues
Comply with legal obligations
We do not sell your personal data and do not use your bookmark data for advertising.

Legal basis for processing
Purpose Legal basis
Creating and managing your account Performance of a contract
Providing Vanity features Performance of a contract
Storing local preferences and settings Performance of a contract or legitimate interest
Browser bookmark sync and import/export features you choose to use Performance of a contract
Payment, licensing, and subscription handling Performance of a contract and legal obligation
Sending transactional or security emails Performance of a contract
Customer support Legitimate interest or performance of a contract
Security, fraud prevention, and abuse detection Legitimate interest
Third-party services
Provider Purpose
Supabase Authentication, account management, session handling, edge functions
Google OAuth Sign in with Google
GitHub OAuth Sign in with GitHub
Discord OAuth Sign in with Discord
Brevo Transactional email, including password-change notification emails
Lemon Squeezy Checkout, licensing, or subscription handling
Sentry Error monitoring
Open-Meteo Weather and geocoding data for weather features
Unsplash Background or image-related features, via Vanity’s backend function
Browser extension permissions
Bookmarks permission, to read, organize, create, update, move, or delete bookmarks when you use bookmark features or sync
Storage permission, to save local preferences and app data
Tabs permission or access to the active tab, to support quick capture of the current page
Sessions permission, to show recently closed pages
Top sites access, to show most visited pages
Commands support, for quick capture shortcuts
Authentication-related permissions or web auth flows, where needed for login
Cookies and local storage
Vanity and its website may use cookies, local storage, extension storage, or similar technologies to keep you signed in, remember preferences, store bookmark and organization data locally, store theme and weather settings, store license state, and provide security features.

How long we keep data
Data type Retention
Account data Until account deletion or as needed to provide the service
Local app data Until you delete it, clear browser or extension storage, uninstall the extension, or use in-app wipe/delete tools
Bookmark and preference data stored locally Until removed by you
Support emails For as long as needed to handle your request and maintain appropriate business records
Security and error logs For as long as needed for security, fraud prevention, and abuse detection
Payment and invoice records As required by tax and accounting law
Your rights
Access your personal data
Correct inaccurate data
Delete your personal data
Restrict processing
Object to certain processing
Request data portability
Withdraw consent where processing is based on consent
To exercise your rights, contact us at info@vanityapp.cc.

Account deletion and local data deletion
Vanity currently includes a local wipe data feature for guest data stored on your device.

If you want your account deleted, you should contact us at info@vanityapp.cc.

Security
Secure authentication
Access controls
Encrypted connections where applicable
Session handling and session timeout controls
MFA support where enabled
Limited access to user data
Error monitoring and security logging where necessary
Input validation and security checks within the app
Children’s privacy
Vanity is not intended for children under 13.

International transfers
Some of our service providers may process data outside your country or region. Where required, we use appropriate safeguards, such as Standard Contractual Clauses or equivalent legal mechanisms.

Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the effective date at the top of this policy.