Privacy

• What you save. The page address, the extracted text, a summary and tags generated from it, and the numeric embeddings that make it searchable. For uploaded files (PDFs, images, voice notes) we also keep the original file and a readable copy. Dates found inside saves are kept so they can resurface when near.
• Surface connections you set up. If you link Telegram we store your chat id; if you use save-by-email, your private address slug; if you add your own Anthropic key (Pro), it is stored encrypted and used only for your requests.
• Your account. Email address, and a password hash if you didn’t sign in with Google, Microsoft, or GitHub.
• Usage counts. How many saves and questions you’ve made this month, to enforce plan limits.
• Payment details are never stored by us. Card handling is entirely Stripe’s; we keep only their customer identifier.

The extension reads the page you are on only when you act — pressing the save shortcut, clicking Save, opening the popup, or asking a question. It does not run in the background, does not follow you between sites, and does not send anything anywhere until you ask it to.

Reading the page inside your browser is the point: it means a page you are logged into is captured as you see it. That text goes to Coolbar and nowhere else.

• Embeddings are generated on our own servers — the text of your memories is never sent to a third party to be indexed.
• Anthropic (Claude) receives the text of an item when it is summarised (and images/PDF pages when they need to be read), and the relevant excerpts when you ask a question, in order to produce the answer. Voice notes are transcribed on our own servers, not by a third party. Anthropic does not train on your content.
• Telegram carries your messages to and from the bot if you connect it; Resend processes mail you send to your save-by-email address and the digests we send you. Each sees only what you route through it.
• Stripe handles payment, if you subscribe.
• Anyone with a share link — but only if you create one. Sharing a memory or an answer makes that one thing readable at its URL until you revoke it; nothing is ever public by default.
• Nobody else. We do not sell your data, share it with advertisers, or use it to train any model of our own.

• Delete any memory and it is gone, along with its embeddings and stored files.
• Export everything as JSON from settings — your memory is portable.
• Delete your account yourself, also in settings: every memory, file, agent, and share link is erased immediately and any subscription cancelled. No email, no waiting.
• Rotate your access token or save-by-email address at any time from settings, which immediately cuts off anything using the old one. Unlink Telegram the same way.

Coolbar is early. It is run by a small team, on our own servers, and it is not immune to mistakes. We will not pretend otherwise, and we will tell you plainly if something goes wrong with your data rather than burying it.