Privacy Policy
Last updated: 30 September 2026
Who we are
Section titled “Who we are”Linkgarden is developed and owned by Mikael Walde, an individual developer. You can reach us at purwalbsn@gmail.com.
What data Linkgarden stores
Section titled “What data Linkgarden stores”Linkgarden stores the bookmarks, folders, and tags you create: a link’s name, URL, notes, favourite state, folder and tag assignments, colours, and the favicon fetched for it, along with the dates each item was created, modified, or deleted.
This data lives in a database on your device. If you are signed in to iCloud, it also syncs to your own private iCloud account. We have no server of our own and no access to your library — we cannot read your bookmarks.
What leaves your device
Section titled “What leaves your device”- iCloud sync. Your library syncs through Apple’s CloudKit to the private database of your personal iCloud account, so it appears on your other Macs and iPads. It is governed by Apple’s privacy policy. Signing out of iCloud stops the sync; the data stays on your device.
- Page titles and favicons. When you save a link, Linkgarden requests that
page directly from the site in order to read its
<title>and icon. The site sees this request the way it would see any browser visit. Onlyhttpandhttpslinks are fetched, and a failure is silent — the link is still saved. - Analytics. See below.
Nothing else is sent anywhere. Linkgarden has no account system and no login.
Analytics
Section titled “Analytics”Linkgarden collects anonymous product analytics through
PostHog, hosted in the EU (eu.i.posthog.com), to see
which features are actually used.
What Linkgarden captures is limited to which action happened and the shape of the content involved — for example that a bookmark was saved, whether it had a URL or notes, and how many characters its name was. Bookmark names, URLs, notes, folder names, and tag names are never sent. Events carry a device-generated identifier that is not linked to your name, email, or Apple ID.
PostHog also stores an approximate location with each event — country, region, city, postal code, and time zone — estimated from the network address the event arrives from. That address is discarded, not stored.
Analytics is on by default. You can turn it off at any time in Settings under Privacy → Share Anonymous Usage Data; once off, no further events are sent.
Third parties
Section titled “Third parties”Two services are involved, and no others:
- Apple iCloud / CloudKit — stores your synced library in your own iCloud account.
- PostHog (EU) — receives the anonymous usage events described above.
Your bookmark data is never sold, shared, or used for advertising.
Data retention and deletion
Section titled “Data retention and deletion”Your library is kept for as long as you keep it. Deleting a bookmark moves it to Recently Deleted, where it stays for 30 days and is then removed permanently; you can also delete it immediately from there. Deletions sync to your other devices.
To remove everything, delete the app and remove Linkgarden’s data from your iCloud storage in System Settings. Anonymous analytics events cannot be tied back to you and therefore cannot be individually deleted; write to us if you have a question about them.
Changes to this policy
Section titled “Changes to this policy”If this policy changes, the updated version is published on this page and the Last updated date above is revised. Material changes will also be noted in the app’s release notes.
Contact
Section titled “Contact”Questions about privacy: purwalbsn@gmail.com.