What we keep, and what we don't.

Bindle exists to keep copies of web pages for you, so it would be odd to be cagey about data. This page describes everything Bindle stores and everyone who can see it. Last updated August 2026.

What Bindle stores

Your account: a username, an email address, and a salted password hash (PBKDF2, 210,000 iterations). Passwords are never stored in a recoverable form. Your bookmarks: the URL, title, notes, tags, privacy flag, and dates you give them. The archive: a copy of each page you save — the original HTML and the extracted text, which is indexed for search. Archived copies are visible only to accounts that saved the same URL — never to the public, even when the bookmark itself is public. Billing: handled by Stripe; Bindle keeps a subscription status and a Stripe customer ID, never card numbers.

What Bindle does not do

No advertising, no ad-tech tracking pixels, no selling or sharing of data, no training of models on your library. The only third-party services that see anything are PostHog, which counts page views and feature use without cookies, session recording or a cross-site identity, and Sentry, which receives error reports (a stack trace, the page URL, your browser version) when something in Bindle breaks — never the contents of your library. Server logs record request metadata for debugging and are rotated. When Bindle fetches a page to archive it, the request comes from Bindle’s servers, not from your browser, so the site you saved does not learn who saved it.

Public and private

A bookmark marked public appears on your profile page, in your public RSS feed, and can appear on the Popular page. A bookmark marked private is visible only to you and through your private feed URL, which acts as a secret — treat it like a password. Notes follow the same rule as the bookmark they belong to.

Your data is yours

You can export everything at any time from Settings, and you can delete your account, which removes your bookmarks, notes, tags and archived pages. Deleting a bookmark or an account removes the stored copy from storage immediately, except where a lawful preservation obligation applies; backups age out within thirty days. Operational logs are kept for at most thirty days. Questions go to the contact page.

Notices

Copyright notices: dmca@bindle.link. Abuse of public pages: abuse@bindle.link. Legal process: legal@bindle.link. The terms describe how each is handled.