Privacy Policy

m66 is a personal bookmark manager. The service is operated by an independent product team. When this policy says "we," "our," or "us," it means the team behind m66.

Our contact address for privacy questions is hello@m66.app.

We collect only the data necessary to operate the product and provide you with a working bookmark library.

Account data. Your email address and a hashed version of your password (if you use email authentication), or a provider identifier (if you use OAuth). We do not store plaintext passwords.

Bookmark data. The URLs you save, along with metadata we fetch automatically on your behalf — titles, descriptions, preview images, favicons, and page content for full-text indexing (Premium). This data is yours and exists to make your library useful to you.

Organization data. Collections, tags, notes, and archive states you create inside the product.

Usage data. Aggregate, anonymized product analytics (page loads, feature interactions) collected through Vercel Analytics. This data cannot be tied back to an individual user.

Error data. Crash reports and error traces collected through Sentry, used solely to diagnose and fix software bugs. Sentry data is minimized and does not include bookmark content.

We do not build advertising profiles. We do not track you across other websites or services. We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not require or display a public profile connected to your bookmarks.

m66 has no social layer — there are no followers, feeds, or any mechanism to expose your library to other users unless you explicitly choose to share something (a feature that does not exist in the current product).

We use your data for the following purposes only:

• To authenticate you and manage your account.
• To store, enrich, and serve your bookmark library back to you.
• To power search — including full-text search of page content on Premium — across your own saved data.
• To process billing through Stripe when you subscribe to Premium.
• To send transactional emails (account verification, password reset, billing receipts) through Resend.
• To improve the product through anonymized aggregate analytics.
• To diagnose and fix errors through Sentry crash reports.

Your data is stored in Convex, a cloud backend infrastructure provider with encryption at rest and in transit. We apply principle-of-least-privilege access controls internally.

We take reasonable technical and organizational measures to protect your data. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you as required by applicable law.

m66 uses the following third-party services, each with their own privacy policies:

• Convex — database and backend infrastructure.
• Vercel — hosting, edge network, and anonymized analytics.
• Stripe — payment processing for Premium subscriptions.
• Resend — transactional email delivery.
• Sentry — error monitoring and crash reporting.

We do not share your personal data with any other third parties.

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and bookmark library within 30 days, except where retention is required by law (for example, billing records).

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at hello@m66.app. We will respond within 30 days.

You can export or delete your bookmarks directly inside the product without contacting us.

We use a minimal set of cookies: a session cookie required for authentication, and cookies set by Vercel Analytics for anonymized usage measurement. We do not use advertising cookies or third-party tracking pixels.

m66 is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have done so, contact us and we will delete the data promptly.

We may update this policy when the product or applicable law changes. Significant changes will be communicated by email or a notice in the product. The "Last updated" date on this page reflects the most recent revision.