Privacy Policy

Last updated: November 4, 2026

Privacy policies are usually hard to read, so this one says plainly what starkeep keeps, why, and who else touches it.

Starkeep is run by Onclick LLC, a worker cooperative. It is a paid archive of the pages you bookmark, and the archive is the product, so we have no reason to do anything with your data except keep it for you.

What we keep, and why

What you give us

• Your account. Your email address, which is how you sign in and how we reach you about your account, and a password if you set one.
• Your bookmarks. Every address you save, with the title, tags, notes, and read-later flag you give it.
• Your imports. A Pinboard export you upload is read once to create your bookmarks, and only the bookmarks it creates are kept.
• Your payments. Paid plans go through Stripe, which handles your card; we keep only the reference Stripe gives us and your plan.
• Your messages. Whatever you tell us when you write to us.

What an archive holds

When you save a page, starkeep makes a private copy of it: the readable text, a PDF of the whole page, a thumbnail, the page's original HTML, and the images on it, copied in rather than linked. That copy is stored under your account and nobody else's.

The browser extension reads a tab only when you click its button, and keeps nothing in your browser but the app's address and its own key. A page you save from it with Save this tab's copy is kept as your tab showed it, which can include what you were signed in to see, such as a page behind a login or a paywall. That page may hold your own personal details or other people's, so treat what you save as you would any private copy, since it stays as private as the rest of your archive.

What we collect automatically

• Fetches on your behalf. Our servers open every address you save to capture it, and check it again about once a month to tell you whether the original is still there. These requests come from Cloudflare's network, not from your browser, so the sites you save never see your address or your cookies.
• API usage. When you use the API, we count your calls by account and by operation, so we can apply rate limits and see which parts of the API are used.
• Request logs. Our servers record each request in Cloudflare's logs, which expire on their own after a few days.
• Abuse protection. Our gateway records the IP address of a client that probes for files no site of ours has, or that keeps going past the rate limit, with the path and browser it sent. A rate-limit ban lapses after a day and a probe ban after a week, while an address that probes repeatedly is added to a blocklist in Cloudflare's firewall that does not lapse on its own.

What comes from sign-in providers

If you sign in with Google or Microsoft, that provider tells us your email address and whether it has verified it, and we create your account only for a verified address.

Visits to our public pages

Our marketing site and documentation count visits with Umami, an analytics tool we run ourselves rather than a third-party service. It records which pages are viewed, the referring site, and the browser, country, and device type, sets no cookies, and does not store your IP address or build a profile of you. The app, your bookmarks, and your archives carry no analytics at all, and we have no advertising and no tracking pixels anywhere.

What we promise about your archive

• Yours alone. Every archive belongs to your account and no one else's, there is no public profile, and nothing is shared by accident.
• Never served raw. A page's own code is kept but never run, and you read its text and its PDF from a separate address that carries no cookies.
• Nothing phones home. Images are copied into the archive, so opening a page you kept never tells the original site that you read it.

Who else handles your data

We do not sell your personal information, and we share it only with the providers that run starkeep for us:

• Cloudflare runs all of starkeep: the servers, the database, the file storage for your archives, the browser that captures your pages, the email that sends your sign-in links, and the logs. Cloudflare's privacy policy
• Stripe processes payments for paid plans. Stripe's privacy policy
• Fly.io hosts the Umami analytics we run for visits to our public pages. Fly.io's privacy policy
• Google and Microsoft take part only when you choose to sign in with them.

We also disclose information when the law requires it, and if starkeep changes hands, your data moves with it under this policy.

How long we keep it

We keep your bookmarks and archives for as long as your account is open. When you delete a bookmark, its archived copies are deleted from storage and its records from the database.

When you close your account, any paid plan is cancelled first, and then the account is deleted at once with everything it saved: your bookmarks, archives, files, and search index. Stripe keeps the payment records the law requires it to keep.

Your choices and rights

• See and correct. Your bookmarks, tags, and notes are yours to view and edit in the app at any time, and the account page shows your email and lets you change your password; to change your email, write to us.
• Delete. You can delete any bookmark and its archive from the app.
• Close your account and take your data. Your account page exports everything as one file and closes the account, which deletes it and what it saved.

Depending on where you live, you may have more rights over your data. If you are in the European Economic Area or the United Kingdom, you can ask us to access, correct, delete, restrict, or port your data, object to how we use it, withdraw a consent you gave, and complain to your local data protection authority. If you live in California, Texas, or another US state with a privacy law, you can ask to know, correct, and delete what we hold about you, and we will not treat you differently for asking. We do not sell or share your personal information for advertising, so there is nothing to opt out of.

We process your data to provide the service you pay for, to keep it secure and free of abuse, and to meet our legal obligations.

Cookies

Starkeep sets one cookie when you sign in, which keeps you signed in and is needed for the app to work. We set no cookies for tracking or advertising, and the address your archived files are served from sets none at all.

Children

Starkeep is not for anyone under 18, and we do not knowingly keep information about them. If you believe a child has an account, write to us and we will delete it.

Where your data lives

Cloudflare runs starkeep on its global network, so your data may be processed outside the country you live in, including in the United States.

Changes to this policy

When we change this policy, we post the new version here and update the date at the top.

Contact

Onclick LLC Email: privacy@onclick.coop