Privacy policy
Rummage is a bookmark search tool. This page describes exactly what it reads, what leaves your computer, and what is kept — in plain terms, matching what the software actually does.
Who is responsible
Rummage is operated by Pedro Mas, based in Spain. For any privacy question or request, contact support@get-rummage.com.
What the extension reads
| Data | Why | Where it goes |
|---|---|---|
| Your Chrome bookmarks (URL, title, folder, date added) | They are what Rummage searches | Stays in your browser |
| The content of bookmarked pages you have chosen to index | To understand what a page is about | Extract sent for processing, see below |
| Text you type into the search box | To match it against your index | Sent for processing, see below |
| Your license key, if you buy the full version | To confirm the purchase | Stored locally, sent for validation |
What leaves your computer
Three things, and nothing else:
- Page extracts, when indexing. For each bookmark you have chosen to index, Rummage sends the page title, its folder name, and approximately the first 1,500 characters of the article text to our server, which forwards it to OpenAI to generate a mathematical representation of its meaning. That representation is returned and stored in your browser.
- Your search terms. When you search, the text you typed (up to 400 characters) follows the same route, so it can be compared against your index. The comparison itself happens in your browser.
- Your license key, if you purchase. It is sent to Lemon Squeezy to confirm it is genuine, and to our server when generating AI summaries so we can check the purchase before doing paid work.
Bookmarks in folders you have not selected are never fetched, never read, and never sent anywhere.
Pages behind a login
Rummage fetches bookmarked pages without your cookies or session. It cannot and does not read anything that requires you to be signed in — private documents, webmail, bank pages, internal company sites. Those bookmarks are indexed from their title and folder alone and are labelled "title only" in your results.
What is kept, and for how long
| Where | What | Retention |
|---|---|---|
| Your browser | Bookmark details, page extracts, the search index, your license key | Until you remove the extension or clear its data |
| Our server (Cloudflare) | Nothing. Requests are forwarded and the response returned; content is not written to any store. Your IP address is used transiently to apply rate limits and is not retained as a record. | Not stored |
| OpenAI | The text described above, as their API processes it | Per OpenAI's API policy: retained up to 30 days for abuse monitoring, then deleted, and not used to train their models |
| Lemon Squeezy | Your purchase record and billing details, if you buy | Per their own policy as merchant of record |
What we do not do
- No accounts, logins or user profiles
- No analytics, telemetry, or usage tracking
- No advertising, and no sharing or selling of data to anyone
- No reading of your browsing history or of pages you visit
- No syncing of your bookmarks or index to any server
Why the extension asks for broad site access
Chrome shows a warning that Rummage can "read and change your data on all websites". This is required for one reason: to index a bookmark, the extension has to download that bookmarked page, and a bookmark can point anywhere. The permission is used only to fetch pages you have chosen to index. Rummage does not inject anything into the pages you browse and does not observe your browsing.
Third parties we use
| Provider | Purpose |
|---|---|
| OpenAI | Generates the meaning representations, summaries and tags |
| Cloudflare | Runs the small server that forwards those requests, and hosts this site |
| Lemon Squeezy | Handles payment, invoicing and tax as merchant of record |
Your rights
Under the GDPR you may request access to, correction of, or deletion of personal data held about you, and may lodge a complaint with your national supervisory authority (in Spain, the AEPD).
In practice we hold almost nothing about you: everything the extension produces is on your own machine, and deleting it is a matter of removing the extension. If you have purchased, your billing record is held by Lemon Squeezy as merchant of record — write to us and we will help you reach them, or contact them directly.
Children
Rummage is not directed at children and we do not knowingly collect their data.
Changes
If this policy changes materially, the updated version will be posted here with a new date at the top. Substantive changes affecting existing users will also be noted in the extension's release notes.