Privacy Policy

Last updated 30 October 2026

Ritro is a personal, non-commercial project run by Minit Jain, an individual based in India. This policy explains what data Ritro (the website at ritro.vercel.app and the Ritro browser extension) handles, why, and what you can do about it. Questions or requests: minitjain.work@gmail.com.

What Ritro collects

• Account details. Your email address and password (stored hashed by our auth provider). If you sign in with Google or GitHub, the basic profile that provider shares, such as your name and profile picture.
• What you save. The links you save, the title, description and preview image address Ritro reads from those pages, the tags (AI generated or added by you) and your collections.
• Preferences. Whether you opted out of the daily digest email, and your light or dark theme (stored only in your browser).
• Technical data. Request counters tied to your account for rate limiting, which expire within an hour, and standard server logs kept by our hosting provider, which can include your IP address and browser type.
• Usage statistics. Aggregated page views and page speed measurements through Vercel Web Analytics and Speed Insights. These don't use cookies and don't identify you across other sites.

The browser extension stores your login tokens and email address in the extension's local storage on your device until you log out, which also ends the session on our auth provider. It doesn't keep a copy of your saves. It reads the address of the current tab only when you click save or use its keyboard shortcut, and it doesn't run on the pages you visit.

Ritro does not sell your data, show ads, or use advertising or cross-site tracking.

Why it's used

• To run your account and show you your saves (needed to provide the service).
• To suggest tags for what you save, using AI (part of the service).
• To send the daily digest of things you saved. Every email has an unsubscribe link.
• To keep the service secure and prevent abuse, for example through rate limiting.
• To understand, in aggregate, how the site is used and how fast it loads.

If you're in the EU or UK, the legal bases are performance of our agreement with you (running your account) and legitimate interests (security, the digest, aggregate statistics). You can object to any processing based on legitimate interests.

Who processes it

Ritro relies on these service providers, each bound by its own terms and privacy policy:

• Supabase: accounts and the database that stores your saves (hosted in Mumbai, India).
• Vercel: hosting, server logs and usage statistics (servers in the United States).
• Google Gemini API: receives the title and description of each page you save, to suggest tags. Ritro currently uses Gemini's free tier. Under Google's terms for that tier, Google may use this text to improve its products, and human reviewers may read it after it has been disconnected from Ritro's account. Don't rely on Ritro for pages whose titles or descriptions you consider sensitive.
• Upstash: rate limiting (counters tied to your account ID) and the queue that schedules tagging (bookmark IDs only).
• Resend: delivers the digest email, so it receives your email address and the saves listed in that email.
• Google and GitHub: only if you choose to sign in with them.

When you save a link, Ritro's server visits that page to read its title, description and preview image. The site you saved sees a request from Ritro's server, not from you.

International transfers

Your data is stored in India and processed in the United States and other countries where these providers operate. Where the law requires it, transfers rely on the safeguards in the providers' data processing terms, such as standard contractual clauses.

How long it's kept

Your account and saves are kept until you delete them or delete your account. Deleted bookmarks are removed from the database straight away. Rate-limit counters expire within an hour. Server logs are kept for the period set by the hosting provider.

Your rights

Wherever you live, you can access, correct, export or delete your data, and withdraw consent or object to processing. You can download all your data or delete your account and everything in it yourself, from Settings in the app. For anything else, email minitjain.work@gmail.com from the address on your account and you'll get a reply within 30 days.

• EU and UK: you also have the right to restrict processing and to complain to your local data protection authority.
• India: you can raise a grievance at the email above. If it isn't resolved, you can approach the Data Protection Board of India.
• California and other US states: you have the right to know, delete and correct your data, and you won't be treated differently for using these rights. Ritro does not sell or share personal information as those laws define it.

Cookies and local storage

Ritro uses only cookies that are strictly necessary to keep you signed in. Your theme choice is stored in your browser's local storage. There are no advertising or tracking cookies, and the usage statistics don't use cookies, so there is no cookie banner.

Children

Ritro is not meant for anyone under 18. If you believe a child has created an account, email us and it will be deleted.

Security

Data travels over encrypted connections, passwords are stored hashed, and database rules restrict each account to its own data. No system is completely secure, so if you find a problem, please report it to the email above.

Open source

Ritro's code is public on GitHub under the GNU AGPL-3.0 licence, so you can check how your data is handled.

Changes

If this policy changes, the date at the top will change. Significant changes will be announced on the site or by email before they take effect.