This Privacy Policy explains what information Jakoda (“Caraban”, “we”, “us”) collects when you use the Caraban browser extension and the caraban.app website (together, the “Service”), how we use it, and the choices you have. We keep it short because Caraban collects little.
The short version
- We collect your email address to create your account and sign you in.
- We store the link collections you create so we can sync them across your devices.
- We set no cookies, and use no advertising and no third-party analytics.
- We never sell your data.
- You can export or delete your data at any time by contacting us.
Who we are
The Service is provided by Jakoda. If you have any questions about this policy or your data, contact us at contact@jakoda.app.
Information we collect
Information you provide
- Account information. When you sign in, you provide your email address. We send a one-time code to that address to verify it; creating an account this way generates a unique account identifier and a username derived from your email (which you can change).
- Your content. The link collections you build, their names, icons, and optional descriptions, the links inside them (title, website address, and the logo or image you choose for each), and your favorites.
- Public profile. If you publish a collection, a username (a handle we generate for you and that you can edit) is shown alongside it so others know who curated it.
Information collected automatically
- On your device. The extension stores your collections, favorites, sign-in session, and a few sync flags locally in your browser's storage so the Service works quickly and offline. Signing out clears your session; the cached collections stay on your device until you uninstall the extension or clear its storage.
- By our hosting provider. To provide authentication and database services, our backend provider (see “Service providers” below) processes technical request data such as your IP address and timestamps. This is used to operate and secure the Service, not to profile you.
- Sharing and install activity. When you install a public collection, we record that install (a link between your account and that collection) so it can sync to your other devices and be uninstalled later. For collections you publish, we keep aggregate counts of how many times they have been viewed and installed, which we show you as your sharing stats.
- No cookies, no third-party tracking. Caraban sets no cookies. Your sign-in session is held in the extension's own storage rather than in browser cookies, so there is no cookie banner to dismiss. Beyond the first-party counts described above, we use no analytics scripts, tracking pixels, fingerprinting, or third-party advertising networks.
Images from third-party websites
When you add a link and choose a logo by its web address, or when a collection displays such a logo, your browser requests that image directly from the website that hosts it. As with any web request, the host of that image may see your IP address and standard request information. Caraban does not control those websites; their own privacy practices apply.
How we use your information
- To create and maintain your account and sign you in.
- To store your collections and sync them across the browsers and devices where you are signed in.
- To publish and display collections you choose to make public, and to power the Discover directory.
- To record installs so shared collections sync and uninstall correctly, and to show creators aggregate view and install counts for what they publish.
- To keep the Service secure, prevent abuse, and fix problems.
- To respond to your requests and communicate with you about the Service.
Legal bases for processing
Where the EU/UK GDPR applies, we process your data to perform our contract with you (providing the Service), on the basis of our legitimate interests (keeping the Service secure and functional), and with your consent where you choose to publish a collection publicly. You may withdraw consent at any time by making the collection private again.
How we share information
We do not sell your personal data. We share it only in these limited cases:
- Service providers. We use Supabase to provide authentication, database, and hosting. Your account and collection data are stored on Supabase's infrastructure and processed under their privacy terms as our processor.
- Public collections. Any collection you choose to make public (its name, icon, optional description, links, and your username) becomes visible to other users and to anyone who has the link. Public collections may also be crawled, indexed, or reproduced by search engines, archives, and other third-party services that we do not control. Keep a collection private if you do not want it shared.
- Legal reasons. We may disclose information if required by law or to protect the rights, safety, or property of our users or the public. We require valid legal process, disclose only what that process actually requires, and will tell you about the request unless we are legally prohibited from doing so or there is an emergency involving someone's safety.
International transfers
Your data may be processed on servers located outside your country, including by our hosting provider. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.
Data retention
We keep your account and synced collections for as long as your account is active. Signing out clears your session from the device, but the collections cached locally remain until you uninstall the extension or clear its storage. When you delete your account, we hard-delete your profile, collections, favorites, saved links, and install records from our systems, except where we must retain limited information to comply with legal obligations.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email contact@jakoda.app. You can also delete your account from the profile page, uninstall the extension to clear locally stored data, and make public collections private at any time. If you are in the EU/UK, you may lodge a complaint with your local data protection authority.
Security
We use industry-standard measures to protect your data, including encrypted connections and access controls at the database level. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address issues promptly.
Children
Caraban is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you through the Service.
Contact us
Questions or requests? Email us at contact@jakoda.app.
This policy applies to the Caraban extension and the caraban.app website. It does not cover third-party websites you reach through links you save.