Privacy Policy

X Bookmarks Exporter and local file preview

The Unstash X Bookmarks Exporter requests your bookmarks from X in your signed-in browser only after you start a read. It processes Post text, author information, your X account ID, Post links, dates, and available media links to show a preview and create your export file. It reads X session cookies locally to verify your account and authenticate requests, and parses public X scripts for the current request configuration. Session cookie values and request credentials are not saved by the extension or sent to Unstash. It does not read passwords or change your bookmarks on X.

Reading progress, bookmarks, and the version and time of your risk confirmation stay in the extension's local browser storage. The extension does not send bookmark content to Unstash and currently sends no analytics events. Preview images make direct requests to their image hosts, such as X's media servers. Exported media is linked rather than downloaded. The extension uses your browser's storage protections; it does not add its own encryption to stored bookmarks or downloaded files.

Starting over discards the previous read. You can also clear the extension's local data or remove the extension to delete its stored bookmarks. Files you download remain under your control and must be deleted separately if you no longer want them.

The anonymous file import page parses your file in this browser and stores a local draft. File content is uploaded to your Unstash account only when you choose Save to Unstash and complete the associated sign-in. Closing that sign-in pauses the save; signing in elsewhere does not start it. Preview images may still contact their image hosts before you save. File import analytics describe the interaction and its result, without file names, bookmark text, URLs, search terms, or account handles.

Completed saves and Discard draft delete the local draft. Inactive drafts are removed after seven days; drafts waiting for sign-in, saving, failed, or awaiting an account choice remain until you complete or discard them. Clearing this site's browser data also removes its drafts. After saving, account retention, export, and deletion choices described below apply to your saved data.

Information handled by the extension is used to provide its export and preview features. We do not sell it or use it for advertising. Our use complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Information we process

Unstash processes account information, Connected Source summaries, Saved Items, Library Items, collections, actions, plan and usage summaries, and notification settings to provide the service.

When you connect a source such as X, Unstash processes the authorization, source account summary, bookmark identity, Post text, author and attribution fields, timestamps, links, public metrics, and available media metadata needed to import and manage your saved content. Provider credentials remain in server-side token custody. We do not sell your personal information.

How we use information

We use information to operate, secure, maintain, and improve Unstash; complete actions you request; provide support; and meet legal obligations. Product analytics and diagnostics are designed to avoid routinely capturing raw saved content, full source URLs, or private account credentials.

For X, this includes the initial import, the sync frequency you choose, keeping permitted stored content current, and removing an X bookmark only after you explicitly choose Remove and its Undo Window ends. X authorization and Unstash's Source Mutation Permission are separate controls, and you can disable future X bookmark changes in X Source settings.

AI processing and third-party AI providers

Unstash uses third-party AI services to summarize and tag your saves, read text in and describe attached images, suggest Collections and Action titles, write Collection briefs, translate posts, detect duplicate saves, and power Library search. Unstash asks for your permission in the app before any of your content is sent to these providers. If you do not allow it, none of your content is sent and Unstash continues to work without AI features.

When you allow AI processing, Unstash may send:

• Text of saved posts and links, including titles, quoted posts, link previews, and content type and language
• Images attached to your saves and their links
• Names, descriptions, and notes of your Collections, when requesting suggestions, organizing saves, or writing a Collection brief
• The search queries you enter in your Library

This content is collected from the sources you connect or import and from what you enter in Unstash. It is sent from Unstash servers, never directly from your device, and only to provide the AI features listed above. Your name, email address, and account credentials are not sent to AI providers.

We currently share this content with:

• OpenAI, for summaries, tags, image reading, suggestions, briefs, and translation
• Cloudflare Workers AI, for search indexing, search queries, and duplicate detection
• OpenRouter and the model hosting providers it routes to, for summaries, suggestions, briefs, and translation. OpenRouter requests require endpoints that do not collect content or retain it after processing.
• Google Gemini, for image reading and search

These providers process content only to return results to Unstash, under terms that do not permit them to use it to train their models, and provide protection for your data equal to that described in this policy. Unstash does not use your content to train or fine-tune a foundation model. If we add or change an AI provider, we will update this policy and ask for your permission again in the app before sending your content to it.

You can turn AI processing on or off at any time in Settings › Data & Privacy. Turning it off stops new content from being sent; results already generated remain in your account until you delete them or your account.

Service providers and retention

We may use service providers for hosting, authentication, payments, email, notifications, analytics, and error monitoring. They process information only as needed to provide those services to Unstash.

X-derived content is shared with an AI or embedding service provider only when you have allowed AI processing and that capability has been approved and enabled. Unstash does not use X Content to train or fine-tune a foundation model.

We retain app-owned information while your account is active and as needed to provide the service. X-derived readable content is retained only while X permits its use. If X reports content as changed, deleted, protected, suspended, withheld, or otherwise removed, we update it or remove its stored copies and derivatives. After account deletion, billing or webhook records and privacy-safe operational data may be retained for up to 90 days only after de-identification.

Your choices

You can request an account export from within Unstash. The export is an app-owned JSON bundle and excludes source authorization tokens, provider account identifiers, raw provider payloads, service secrets, raw push tokens, raw observability properties, and X Content that is unavailable or has been removed. It also omits derivatives of removed X Content.

You can also delete your account from within the app. Deletion removes your Unstash account and app-owned records, revokes Connected Source authorization, cancels app workflows, and deletes notification tokens and export bundles. It does not delete or change saves on X or another Connected Source. Completed deletion is irreversible.

Disconnecting X immediately stops new import, sync, X bookmark changes, and X-derived AI processing. App-owned collections, notes, and actions may remain, together with source content still permitted for use. Pending external removals become local-only and will not be sent to X.

Contact

For privacy questions, account choices, or a verified X Content removal request, email support@unstash.io. Do not email Post text, full URLs, provider payloads, or tokens. For a removal request, provide the numeric X Post ID and enough information for us to verify the request.