Privacy Policy

1. Who we are

Kumpulink ("Kumpulink", "we") is a Chrome extension that helps you save, clean up, categorize, search, and ask questions about your own Chrome bookmarks. This policy describes what data the extension handles and where that data goes. Questions about this policy can be sent to support@kumpulink.my.id.

2. Data stored locally on your device

To do its job, the extension stores the following data in your browser's local storage (IndexedDB and chrome.storage.local). This data never leaves your device except as described in Section 4:

• Bookmark data — the URL, title, domain, favicon, category, tags, a short page description, and an AI-generated summary of pages you save or organize, mirroring your Chrome Bookmarks.
• Categories and organization state — the category names the extension creates (as folders named Kumpulink/<Category> in your Chrome Bookmarks) and the status of each bookmark.
• Settings — your theme, language, and AI configuration, including the API keys you enter. API keys are stored locally only.
• Ask AI chat history — your questions and the assistant's answers (up to the most recent 100 messages), stored locally so the conversation is still there when you reopen the dashboard.
• Bulk job records — the progress and change list of a Bulk Organize run, including previous titles and folders, so that Undo and selective retry work.

3. Data we do not collect

• We do not operate any server, database, or cloud backend for the extension.
• We do not collect analytics, telemetry, crash reports, or usage statistics.
• We do not use advertising, tracking pixels, or third-party trackers of any kind.
• We do not require or offer user accounts, and we never ask for your name, email address, or password inside the extension.
• We do not sell, rent, or share personal data with data brokers or advertisers — we have no access to it in the first place.

4. When data leaves your device

4.1 The AI provider you configure (BYOK)

Kumpulink's AI features work on a Bring Your Own Key (BYOK) basis. When you use an AI feature — quick-save categorization, Bulk Organize, or Ask AI — the extension sends the following directly from your browser to the AI provider and endpoint you configured in Settings (by default, Google Gemini; alternatively any OpenAI-compatible endpoint you enter):

• Bookmark titles, URLs, domains, and short page descriptions or excerpts needed to categorize or answer;
• Your existing category names, so new bookmarks are filed consistently;
• For Ask AI: your question and the relevant excerpts of your saved bookmarks used as context;
• Your API key, sent only as the authentication credential for that provider's API (for Gemini, in the x-goog-api-key header).

This communication happens directly between your browser and your provider. It does not pass through us, and we cannot see it. How your provider handles data sent to its API is governed by that provider's own privacy policy and terms (for example, Google's Gemini API terms). If you point Kumpulink at a local endpoint (such as Ollama on localhost), nothing leaves your machine at all.

4.2 Fetching page information for your bookmarks

To categorize a page accurately, the extension may read basic public information from a page you save — its title and meta description. By default this is fetched directly by your browser from that page's website, the same way your browser would load it. Two optional exceptions:

• TinyFish (optional). If you choose the TinyFish fetch mode and enter your own TinyFish API key, the URLs of pages being organized — and, for web search in Ask AI, your search queries — are sent to TinyFish's API using your key. This mode is off unless you configure it.
• Ask AI web search (optional). If web browsing in chat is enabled, Ask AI may fetch public web pages or use the configured search provider to answer questions that go beyond your bookmarks. You can turn this off in Settings, or disable page fetching entirely (fetch mode "off").

4.3 Nothing else

Other than Sections 4.1 and 4.2, the extension makes no network requests with your data. There are no other recipients.

5. Permissions and why the extension needs them

Permission	Why it is used
bookmarks	The core function: reading your Chrome Bookmarks to organize them, and creating, moving, and renaming bookmarks inside the Kumpulink/<Category> folders.
activeTab	To identify the tab you are currently viewing when you quick-save it.
scripting	To read the active tab's own meta description (and nothing else) at the moment you save it, so categorization is accurate. It is not used to run code on pages you merely visit.
storage	To store your settings and small pieces of extension state in chrome.storage.local.
unlimitedStorage	So a large local bookmark index (thousands of bookmarks) in IndexedDB is not cut off by the browser's default storage quota.
alarms	To keep Bulk Organize running in batches in the background (the Manifest V3 service worker sleeps between batches) and to resume it reliably.
notifications	To tell you when a quick save or a bulk run has finished, and into which category a page was filed.
host_permissions (http/https)	Bookmarks can point to any website, and AI endpoints are user-configured. The extension needs to be able to (a) fetch basic page information from the pages you save, wherever they are hosted, and (b) reach the AI endpoint you enter. These permissions are used only for those two purposes.

6. Limited Use disclosure (Chrome Web Store)

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically: user data handled by Kumpulink is used only to provide and improve the extension's single purpose — managing your bookmarks; it is never sold, never used for advertising, never transferred to data brokers, and never read by any human (we operate no server where it could be read). The only transfer that occurs is the one described in Section 4, initiated by you, to the provider you configured, for the purpose of the AI feature you invoked.

7. Retention and deletion

• Local data stays on your device until you delete it. You can remove individual bookmarks and clear chat history inside the extension at any time.
• Uninstalling the extension deletes all of its local data (settings, API keys, chat history, and its bookmark index).
• The folders and bookmarks Kumpulink created inside your Chrome Bookmarks are your own Chrome bookmarks; they remain after uninstall, under your control, like any other bookmark.
• Data you sent to your AI provider (Section 4.1) is retained according to that provider's policies, not ours.

8. Security

• API keys are stored only in your browser's local storage and are transmitted only to the provider you configured, over HTTPS. Remote AI endpoints must use HTTPS (plain HTTP is accepted only for localhost endpoints you run yourself).
• The extension validates and sanitizes all URLs it handles and blocks dangerous schemes such as javascript: and file:.
• The extension contains no remotely hosted code; all code runs from the package reviewed and distributed by the Chrome Web Store.

9. Children

Kumpulink is a general productivity tool and is not directed at children under 13. It collects no personal information from anyone, as described above.

10. Changes to this policy

If a future version of the extension changes how data is handled, we will update this page and its effective date before that version is released. Material changes will also be reflected in the extension's Chrome Web Store privacy disclosures.

11. Contact

Questions, concerns, or requests about privacy: support@kumpulink.my.id. See also our Support page and Terms of Service.