← Locus

Locus Sync — Privacy Policy

Last updated: July 6, 2026

Locus Sync is a browser extension that gathers the posts you have already saved or bookmarked on X (Twitter) and Instagram into a single dashboard. This policy explains what data the extension handles and how.

What we collect

  • Account email and password. When you create a Locus Sync account, your email and password are used to authenticate you. Authentication is handled by our backend provider (Supabase). Passwords are stored as salted hashes; we never see them in plain text.
  • Your saved posts. The bookmarked/saved content you choose to sync (such as post text, links, images, and the originating platform) is stored in your Locus Sync account so you can access it across devices and sessions.

What stays on your device and is never sent to us

To retrieve your saved posts, the extension reads the login session your browser already holds for each platform you are signed in to. These platform session tokens and cookies are stored only in your browser's local storage and are never transmitted to our servers or any third party. They are used solely, on your own device, to call each platform's official API on your behalf.

How we use your data

Your email is used to identify your account. Your synced saved posts are used to display your unified dashboard. We do not use your data for advertising, profiling, or any purpose unrelated to providing this single feature.

What we do not do

  • We do not sell or rent your data to anyone.
  • We do not transfer your data to third parties except our service providers, strictly to operate the service: Supabase (data storage and authentication) and OpenAI (whose embedding API processes bookmark text on our servers to enable search — per OpenAI's API terms, this data is not used to train their models).
  • We do not use your data to determine creditworthiness or for lending purposes.
  • We do not track your general browsing activity or history.

Data retention and deletion

Your synced data is retained while your account is active. You can delete your saved posts or request deletion of your account and all associated data at any time by contacting us at the address below. Removing the extension also clears all locally stored session tokens.

Contact

Questions or deletion requests: support@studiolocus.app