Privacy Policy

Overview

LinkTiles is a Chrome extension for organizing bookmarks into spaces and projects. This policy explains how LinkTiles handles your data — whether you use a LinkTiles cloud account or the local-only storage available to earlier installs.

How LinkTiles stores your data

Cloud account (new users). LinkTiles offers a Google account that syncs your bookmarks across devices and backs them up. New users sign in with Google to get started, and their content is stored in Google Firebase (Cloud Firestore), operated by Google Cloud on our behalf.

Local storage (existing installs). If you installed LinkTiles before it introduced accounts, your existing spaces, projects, tiles, notes, and settings remain stored locally on your device in your browser's built-in storage (IndexedDB) — nothing is sent to our servers. You can choose to sign in and sync that data to the cloud; until you do, it stays local on your device.

What is stored in the cloud (only if you sign in)

• Your content: spaces, projects, tiles (saved links — title, URL, icon), notes, dates, and tags.
• Account information: your email address and a unique account identifier, used to authenticate you and associate your data with your account. If you sign in with Google, this also includes the name and profile photo on that Google account. If you sign in with an email address and password, we store no name or photo.
• Invitations you send: if you invite someone to a space, we store the email address you typed, the space it refers to, and whether it has been accepted, declined or withdrawn. This is stored even if that person never installs LinkTiles — it is how the invitation waits for them, and how it can be withdrawn. Invitation records are deleted automatically once they stop being useful: 30 days after being accepted or withdrawn, or 90 days if nobody ever acts on them.
• Share links you turn on: if you share a space or project with a link, we store the link, which space or project it belongs to, whether it is currently on, what level of access it grants, how many people have joined through it and when somebody last did. We also record, for each person with access, whether they joined by link or by invitation. Nothing is stored about anybody who opens a link without joining.
• A profile shown to people you share with: if you share a space or accept a shared space, your name and profile photo (Google accounts) or the first letter of your email address (password accounts) are stored so the other people in that space can tell who is who. Your email address itself is not shown to other members — only to the owner of a space you have been invited to.

We do not collect anything beyond what is needed to provide and sync your bookmarks. There is no advertising, profiling, or selling of your data.

Sharing with someone else

LinkTiles lets you share a whole space, or a single project inside one, in two ways: by entering somebody's email address, or by turning on a link you can send however you like. Sharing is off by default in both cases and happens only when you choose it, one space or project at a time.

• What they can see. Sharing a space shares everything inside it — every project, saved link, note, date and tag in that space, including anything you add to it later. Sharing a single project shares everything in that project, and nothing else in the space around it.
• What they can do. You choose, for each person, whether they can only view or can also edit. Someone who can view may look at what you shared and copy it into a space of their own, but cannot change it. Someone who can edit may add, change, reorder and delete the contents — saved links, projects, notes, dates and tags — and their changes are visible to everyone else who has it.
• What only you can do. Renaming or deleting the shared space or project itself, deleting anything permanently, and sharing it onward with anybody else all stay with you as the owner, whatever role you have given. Nobody you share with can pass that access to a third person.
• Nothing is shared back. Sharing a space with someone gives you no access to their bookmarks, and gives them no access to any of your other spaces.
• What they learn about you. People in a shared space can see the name and photo (or initial) on your profile, as described above. The owner of a space can additionally see the email addresses they invited, because they typed them.
• Ending it. The owner can remove someone's access at any time, and anyone who has been given a space can leave it at any time. Removal is prompt but not instantaneous: access is withdrawn across the space's contents within seconds, and a background process confirms and completes it. Nothing is deleted from the owner when somebody leaves. If a share link is on, removing somebody does not stop them joining again with it — turning the link off, or resetting it, is what stops that.

If you are invited to a space and do not want it, you can decline the invitation, and it is withdrawn. If you were invited by mistake and do not use LinkTiles, you can ignore the email — an invitation grants nothing until it is accepted by someone signed in with the address it was sent to.

Sharing with a link

Instead of naming somebody, you can turn on a link for a space or a project and send it however you like. A link is an invitation to ask for access, never access on its own: whoever opens it must be signed in to LinkTiles with a verified email address before they can join, and there is no public page and no way to read anything shared without joining.

• Anyone who has the link can join. That includes anybody it is forwarded to, whom you never chose. They join at the level you set — view or edit — and become visible members of the space or project like anybody else, with the name and photo (or initial) on their profile shown to the others.
• Before signing in, somebody holding the link can see the name of the space or project, whether it grants viewing or editing, and the display name of whoever owns it. Not its contents, not anybody's email address, and for a project not the name of the space it sits in.
• What we store for it. The link itself, which space or project it belongs to, whether it is on, what level it grants, how many people have joined through it and when somebody last did. We record whether each member joined by link or by invitation, so you can tell how somebody got in. No record is kept of anybody who merely opened the link without joining.
• Turning it off, and resetting it. Turning a link off stops anybody new joining and changes nothing for people already in; turning it back on resumes the same link, so copies you have already sent work again. Resetting replaces it, and every copy of the old one stops working permanently. Neither removes anybody who has already joined.
• A limit. A space or project can hold 50 people besides you, whether they arrived by link or by invitation.

If someone invited you to a space or a project

You may be reading this because you received a LinkTiles invitation and have never used LinkTiles. This section is for you.

• Where we got your address. Another LinkTiles user typed it in order to share a space, or a single project, with you. We did not obtain it from any other source, and we did not buy it.
• Who we are. LinkTiles is the controller for this data. You can reach us at our support page.
• What we hold. Your email address, what you were invited to (a space, or one project inside one), who invited you, and the status of the invitation (pending, accepted, declined or withdrawn).
• Why. Solely to deliver the invitation, to let you accept or decline it, and to let the sender withdraw it. It is not used to market anything to you, and you will not receive further email from us unless somebody invites you again.
• Our basis for it. Our legitimate interest in operating an invitation feature that a user has asked us to perform on their behalf. If you would rather we did not hold it, say so — see below.
• How long. An invitation you decline is withdrawn straight away and the record is deleted 30 days later. One that is withdrawn by the sender is deleted on the same schedule. An invitation nobody acts on is deleted after 90 days. If you accept, the invitation record is deleted after 30 days and your access to that space or project becomes the record instead. You can ask us to delete it sooner.
• Your rights. You can ask us for a copy of what we hold about you, ask us to correct or erase it, or object to us holding it at all. Write to us at the support page above and we will act on it. If you are in the UK or EU and are unhappy with how we respond, you can complain to your national data protection authority.

An invitation grants nothing until it is accepted by somebody signed in with the address it was sent to. Declining it, or ignoring it, is enough — you do not need an account to be left alone. An invitation to a single project gives you that project only: not the space it sits in, and nothing else inside that space.

What LinkTiles Accesses

• Bookmarks: With your permission, LinkTiles can read your Chrome bookmarks to import them.
• Tabs: With your permission, LinkTiles reads tab information so you can save open pages and display their site icons. This uses an optional “tabs” permission you choose to grant — the tab you're actively using is available without it.
• Local storage / IndexedDB: LinkTiles stores your data locally on your device (as your primary storage in local mode, and as a local cache/backup in cloud mode).
• Google sign-in: LinkTiles uses your Google account to authenticate you and enable cloud storage (via Firebase Authentication). New accounts sign in to get started; earlier local installs can sign in optionally to migrate to the cloud.

External Requests

To show site icons for your saved links, LinkTiles loads favicon images from:

• Google's favicon service (google.com/s2/favicons) — used to look up an icon for a link you save by URL.
• The website itself — when a saved item already carries the site's own icon URL (for example, links saved from an open browser tab), that icon may load directly from the site.

These requests include only the site's domain or icon URL needed to display the icon, and are never used for analytics, advertising, or tracking. In cloud mode, LinkTiles also communicates with Google Firebase to store and sync your data.

Product photos (cloud accounts only). To recognize product bookmarks and show a small product photo, our servers may retrieve the public page at a saved URL and an image identified by that page. This includes existing and imported cloud bookmarks. Requests come from our servers, without your browser cookies or login credentials. The website receives the requested URL and our server's network information; displaying a cached product photo does not contact that image host from a reader's browser. We store a small processed thumbnail with the bookmark's access restrictions, and delete this derived data when its account is erased. Photos may be regenerated after a backup is restored. Local-only bookmarks are not sent for product-photo lookup.

Analytics & Tracking

LinkTiles includes no analytics, telemetry, or tracking code. We do not collect usage statistics or any information about how you use the extension.

Data Sharing

We do not sell your data or share it with third parties for their own purposes. In cloud mode, your data is stored with Google (Firebase / Google Cloud) acting as our service provider to host and sync it on your behalf. Favicon requests go to Google's favicon service, and to the sites themselves, as described above.

We use Resend as our service provider for sending email — account emails such as address verification and password resets, and sharing invitations. To send an invitation, the recipient's email address, the name of the space and the sender's email address are passed to Resend for delivery. Resend sends this mail on our behalf and does not use it for its own purposes.

Sharing a space with somebody, as described above, is sharing you initiate. It happens only when you choose it — with the address you enter, or with whoever has a link you turned on and sent.

Data Export & Deletion

You can export your LinkTiles data at any time using the built-in export feature; exported files are saved to your device. If you use cloud sync, you can also delete your account and its cloud data from within the extension, which permanently removes your data from our servers.

If you have been invited to a space and want the invitation gone, decline it — that withdraws it. If you own a space you have shared, removing someone's access or deleting the space ends their access to it. If you shared it with a link, turn the link off or reset it as well, or somebody you removed can join again with the copy they already have.

Contact

Questions about this policy? Contact us.