BookmarkLetter
Privacy Policy
This is an initial draft for an early-stage product. BookmarkLetter has not published a legal entity name, business address, governing jurisdiction, or dedicated privacy contact. It is not a guarantee of legal compliance and should be reviewed before launch.
Last updated
November 9, 2026
What this service is
BookmarkLetter is a web application that helps people collect content, generate newsletter drafts with AI, edit those drafts, manage subscribers, and send email. This policy describes the data the current application actually processes.
Account information
When you create an account, BookmarkLetter stores your name, email address, and a hashed password. Accounts stay unverified until you confirm the address through an emailed link. After the first successful verification, BookmarkLetter sends one welcome email and stores the time that send was claimed so it is not sent again. BookmarkLetter also stores email verification tokens and password reset tokens as hashes, with expiration times.
Authentication cookies
After you log in, BookmarkLetter uses a signed session cookie from NextAuth. The application does not currently implement a separate cookie-consent or analytics product.
Content, notes, and newsletters
You can save URLs, titles, authors, source types, extracted article text, and personal notes. BookmarkLetter also stores newsletter settings, generated drafts, editable blocks, send status, and scheduled send times. Public article URLs may be fetched by the server so readable text can be extracted.
AI processing
Newsletter generation sends your saved content and settings to Anthropic Claude so a draft can be produced. Do not submit information you are not allowed to process with a third-party AI provider.
Subscriber lists and email delivery
If you add subscribers, BookmarkLetter stores their email addresses, optional names, list membership, and unsubscribe status. Verification emails, welcome emails, password reset emails, test sends, and newsletter sends are delivered through Resend. Recipients can unsubscribe through the link included in sent newsletters. After a newsletter is sent, BookmarkLetter stores a delivery record for each recipient and, from Resend, whether that message was delivered, opened, clicked, bounced, or marked as spam. Test emails, verification emails, welcome emails, and password reset emails are not included in those analytics.
Billing
Paid plans are processed by Lemon Squeezy. BookmarkLetter stores subscription and order events needed to determine plan access, including status, renewal or end dates, customer portal links, and generation usage. Card details are handled by Lemon Squeezy, not stored in BookmarkLetter.
Logs
The application records limited server error information for troubleshooting. Newsletter analytics on the Analytics page are computed from the delivery records described above. BookmarkLetter does not use a third-party website analytics product.
Retention and deletion
Verification and password reset tokens expire and are removed when used or superseded. The application does not currently provide a self-serve account deletion control. If you need stored account, content, or subscriber data removed, use the contact page. Operator contact details have not been published yet.
Contact
A public privacy contact, legal entity name, and business address have not been supplied. See the contact page for the current status.