End-to-end encrypted · storage included
One collection across Chrome, Firefox and Safari — and nothing else to set up. No cloud account to connect, no storage to bring, no tokens to paste. The server holds ciphertext and cannot read a single bookmark.
Features
Syncing bookmarks is easy until two devices disagree. Everything below exists because that is the moment collections get damaged.
Storage is included. Other bookmark syncers ask you to supply a backend — a GitHub token, a WebDAV server, someone else's cloud drive — and encrypt into it. Here there is nothing to configure and nobody else in the path: your account is the storage, and it still cannot read anything.
Your password becomes a key on your own device, through Argon2id. Bookmarks are sealed with XChaCha20-Poly1305. What reaches the server is a separate value that cannot be turned back into that key.
Bar, menu, other and mobile map onto one shared layout, so a folder made in Firefox lands where you expect it in Chrome — including the roots one browser has and another does not.
Edit on your laptop while your phone is offline and both sets of changes survive. Deletions carry tombstones, so nothing quietly reappears and nothing quietly vanishes.
After changing your bookmarks the tree is read back and compared against the intent. A write that cannot be confirmed is retried rather than recorded as done — the difference between a bad sync and a lost bookmark.
Every change is a numbered revision. You can see what your collection looked like earlier and restore it — which matters most on the day something goes wrong somewhere else.
Import from any browser's exported HTML and export back to it at any time. No lock-in: the way out is a feature, not a support ticket.
Pricing
Unlimited bookmarks, unlimited devices, every browser. The plans differ only in how you pay.
$1.99/month
Cancel whenever you like.
Get started$19.99/year
Two months cheaper than monthly.
Get started$99once
One payment, no renewal.
Get startedPayment is not live yet. Accounts are free to create and use while we finish it, and these are the prices we intend to charge. Nothing will start charging you without asking first.
If you forget your password and lose your recovery key, your bookmarks are gone. There is no reset that brings them back, because there is no copy of the key anywhere but on your devices. That is the direct cost of the guarantee above, and it is worth knowing before you sign up rather than after.
We are also new. There is no crowd of users to point at and no independent audit yet — when either exists it will be said here plainly, and not before.
FAQ
No — and not as a matter of policy, but of what the design allows. Encryption happens on your device and we hold no key, so a breach, a subpoena or a dishonest administrator yields ciphertext and nothing else.
Your recovery key, shown once when you sign up, decrypts the vault and lets you set a new password. Without both the password and the recovery key, nobody — including us — can open it.
Yes. Apple never implemented a bookmarks API for Safari extensions, so no extension can read or write Safari's bookmarks. Syncing Safari at all requires a native application, which is why we ship one.
They stay on your devices, because that is where they live — the server holds an encrypted copy, not the original. You can export the whole collection to a standard HTML file at any time.
No. Automatic sync is off until you turn it on, and you choose the interval. Installing something is not consent for it to start rewriting your bookmarks on a timer.
Yes. Besides two-way syncing there are two mirror modes — this browser over the server, or the server over this browser. They delete what the other side does not have, so the interface says so plainly and asks twice.
Two minutes to an account, and your bookmarks follow you from there.