Skip to content
Your data

Privacy

Your library lives in your browser. Here is what stays on this device, what uses the internet, and how to keep a recovery copy.

Where your library lives

Keepall stores your links, notes, saved articles, images, videos, documents, collections, and tags in IndexedDB, your browser's local database. Search, file imports, and edits run on this device. Some appearance and interface preferences also use local browser storage.

You do not need a Keepall account. Keepall does not upload your library to a cloud account or automatically sync it between devices.

Each browser profile and device has its own library. Browser storage also belongs to a specific site address, including its protocol, hostname, and port. A different Keepall address can open a separate library. On iPhone and iPad, the Home Screen app has separate storage from Safari. Use a backup to transfer saves between them.

Link previews and article capture

While online, Keepall may send a saved link's URL to its preview service to fetch a title, description, and cover image. The service requests the linked website and may request an image from its host. Downloaded preview images are stored in your local library.

Choosing Save for offline or Update saved article sends that link's URL to Keepall's server. The server requests the public page and supported article images, then returns a readable copy for local storage. It does not sign in to the website or use your browser's cookies.

These requests share the URL, including any information in its path or query, with Keepall's service and the requested hosts. Your personal notes, collections, tags, and other library items are not included. A link still saves when its preview is unavailable. Reading a saved article uses the local copy.

Website icons and other remote requests

When a link has no locally saved preview image, Keepall may load its website icon from Google's favicon service. That request includes the saved link's hostname. If the icon cannot load, Keepall may request the website's own favicon. Those hosts receive normal browser requests.

Opening a source link visits the original website under that website's privacy practices. Saving a web image with Keepall Capture requests the image's bytes from its host. Imported files, locally saved media, and saved article images open from browser storage. Markdown images pointing to remote websites do not load inside notes or imported documents.

The Chrome extension has its own permissions and temporary capture storage. Read the Keepall Capture privacy details for those actions.

Hosting and analytics

Keepall is hosted on Vercel. Loading the website and using its preview or article services makes network requests that may produce hosting logs. The app includes Vercel Web Analytics for aggregate visit and page-view information.

Keepall does not send your notes, saved files, or library database to analytics, and does not use saved library content for advertising. Network services still receive the requests described above.

Deletion and browser storage limits

Deleting an item moves it to Trash. Permanently delete it from Trash or empty Trash to remove it from the current library. Copies in existing backups remain until you remove those backup files.

Clearing Keepall's site data removes the local library and its settings. Browsers can also remove storage under their cleanup policies or when device space runs low. Keepall requests persistent storage protection, but your browser decides whether to grant it. Protection does not prevent you from clearing site data.

Keepall has no server copy of your library to restore for you. Avoid private browsing for saves you want to keep, and keep a separate backup.

Backups you control

Export backup in Settings downloads a .keepall.zip containing library data and saved files, including saved articles and items in Trash. Importing it in another browser or device transfers a copy. It does not connect or sync the two libraries.

Folder backups are optional and require a browser that supports folder access and your permission to write to a chosen folder. While Keepall is open, changed library data is backed up about every 30 minutes. Inactive tabs, lost permission, or a sleeping device can delay a backup. Keepall retains the latest three verified backups for this library. Turning folder backups off leaves completed files in place.

Backups are not password protected or encrypted by Keepall. Anyone with access to a backup file can read its contents. If you choose a folder managed by another storage or sync service, that service may copy the files under its own settings and privacy practices. Keep a copy elsewhere if you need protection against losing this device.

Offline access has limits

Open Keepall online first so the browser can cache the app. When those files and your library remain available, you can browse, search, edit, and read locally saved content offline. A first visit or uncached page needs a connection.

Original websites, new previews, article capture and updates, and web image downloads need the internet. Read the offline guide for preparation and recovery steps.

Contact messages

The Contact form lets you write a support request, report a bug, or suggest an improvement. When email delivery is available and you choose Send message, your name, reply email, topic, message, and any bug details you enter go to Keepall's server, Resend, and the support inbox so we can respond.

The form does not attach your library, saved files, or browser data. Keepall stores the submitted fields, submission time, and email-notification status in its support database until manually deleted. Email notifications also remain with the email provider and support inbox under their own retention policies. Leave out sensitive library content and never include a backup file.

To limit unwanted submissions, Keepall allows up to three messages per hour per email and network address. The limiter stores secret-key hashes of the email and network address, rather than raw network addresses. Inactive limiter records older than two days are cleaned up when a notification status is saved; cleanup waits if there are no new submissions. Hosting providers may separately log request addresses.

If email delivery is unavailable, the form tells you before submission. Copy report puts the text on your clipboard. Opening the GitHub fallback sends the report details to GitHub to prepare an issue and leaves out your name and email. You decide whether to post it publicly. GitHub issues are public.