Relay does not ask for your name or email, does not use analytics SDKs, and encrypts bookmark contents before sync. The service stores an encrypted zero-knowledge vault, not a readable bookmark profile.
What we collect
Relay stores the minimum data needed to operate private bookmark sync:
| Data | What it is | Readable by Relay? |
|---|---|---|
| End-to-end encrypted vault | Your bookmarks, encrypted on your device before upload. | No |
| Vault lookup key | A derived identifier used to find your vault without storing your username in plain text. | Operational only |
| Browser UUID | A random install identifier used for browser limits and abuse prevention. | Yes, random |
| Short-lived sync metadata | Minimal technical metadata used for rate limits, abuse prevention, and reliability. | Limited |
What we do not collect
Relay does not collect, store, or transmit your name, email address, plaintext password, browsing history, location data, analytics events, tracking identifiers, or readable bookmark contents.
How encryption works
Your bookmarks are encrypted on your device before they leave the browser.
- Your password derives the local encryption key.
- Relay encrypts bookmark data before upload.
- The server stores only the encrypted result and required operational metadata.
- Relay does not store your decryption key or a readable copy of your bookmarks.
Third-party services
Supabase stores encrypted vault data and operational metadata for sync.
Stripe handles Relay Pro payments. Relay does not receive card details.
Browser store, Netlify, Cloudflare, and GitHub hosting may process standard request metadata when you install Relay, visit Relay web pages, or download a manual release.
Relay does not include advertising networks, tracking pixels, analytics SDKs, or remote scripts.
Data retention
Your encrypted vault is retained until you delete your account. Bookmark profiles live inside that encrypted vault. Pro profile history keeps full encrypted vault snapshots for a limited restore window, then expires. Account deletion removes the server-side vault and related sync records. Payment records are handled by Stripe according to Stripe's retention requirements.
Your rights
You can delete your account at any time from Relay settings. Because Relay does not require email or name collection, support requests may require you to provide non-sensitive context such as your Relay version and visible error message.
Security review
Relay keeps its product repository private to reduce cloning and repackaging risk. The security model is documented at relayextension.com/security, and approved independent reviewers may receive source access under written terms.
Changes to this policy
If this policy changes materially, we will update the date on this page.
Contact
Questions or concerns? Visit relayextension.com/support.