Privacy Policy
Last updated 17 September 2026
launchitall is a browser start page. This policy covers the website at www.launchitall.com and the browser extension of the same name.
The short version. You can use launchitall without an account, and then nothing at all leaves your browser. If you create an account, your bookmarks are encrypted on your device before they are uploaded. We store the encrypted result and hold no key that can open it, so we cannot read your bookmarks — and neither can anyone who obtains our database.
Using it without an account
With no account, your bookmarks, notes, tasks and settings are stored only
in your own browser, in localStorage. We receive nothing. There
is no analytics, no tracking pixel and no advertising anywhere in launchitall.
What we store if you create an account
| Data | Why |
|---|---|
| Email address | To identify your account, confirm it, and let you reset a password. |
| An encrypted blob | Your bookmarks, notes, tasks and settings — encrypted before upload. We cannot read it. |
| A device label per browser, such as “Firefox on Linux” | To show which devices are signed in and to enforce the one-device limit on free accounts. |
| Your plan and subscription status | To know whether syncing is enabled. |
| Sign-in timestamps | Ordinary security and abuse prevention. |
| Your most-visited sites, encrypted — only if you turn on the Frequent group | So that group can appear on your other devices. Deleted when you turn it off. |
What we never receive
- Your bookmarks in readable form — not titles, not URLs, not even how many you have.
- Your password. A key is derived from it in your browser and never sent. What is sent for sign-in is a separate one-way derivation that cannot be used to decrypt anything.
- Your encryption key or recovery code.
- Your browsing history, with one exception you control, described below.
- Payment card details. Those go directly to Stripe; we never see them.
The one exception: the Frequent group
The extension can show a Frequent group built from your browser's most-visited list. It is off unless you turn it on.
If you turn it on and you have an account, that list of sites is encrypted alongside your bookmarks and synced, so the same group can appear on launchitall.com and on your other devices. This is the only browsing-derived data that leaves your machine. As with everything else in the vault, we hold ciphertext and no key that opens it — but it is being stored and transmitted, which is why it is called out here rather than buried.
The icon shown on each of those tiles comes from your browser's own store, not from the site and not from anyone else — no request is made to fetch it. Where it is small enough, it is stored with the site so the same group looks the same on launchitall.com; it is encrypted exactly as everything else in the vault is.
Hiding a site from that group records that you hid it, so it stays hidden; that record sits in the vault with everything else and is capped. Turn the group off and the stored copy is deleted, that record with it. Use it without an account and the list never leaves your browser at all.
The extension and your most-visited sites
The extension requests topSites, so that adding a bookmark can
suggest sites you already visit often, and so the optional Frequent group can
exist at all. On Chrome it also requests favicon, which lets it
draw tiles with icons your browser already holds rather than fetching them
from the sites. Both are optional permissions, asked for from the settings
screen when you turn the feature on — the extension installs without a
permission prompt.
That list is read in your browser and used to draw the suggestion menu. It is not transmitted anywhere unless you turn on the Frequent group — the exception described above — and then only encrypted, into your own vault. Leave that group off and it never leaves the machine.
The extension requests no access to your browsing history, your browser
bookmarks, or the content of pages you visit, and runs no content scripts. It
holds no access to any website unless you grant one: if you add a private ESPN
fantasy league, it asks for access to ESPN's fantasy service
(lm-api-reads.fantasy.espn.com) and nothing else, so that your
browser can send ESPN the sign-in it already has. Removing your last ESPN
league gives that access back.
Other services involved
- Supabase hosts the database and authentication. It holds the data in the table above, in encrypted form where stated.
- Stripe processes subscription payments and handles card details directly.
- Open-Meteo provides the forecast. Your chosen coordinates are sent to it to retrieve weather. It requires no account and sets no cookie. Remove the weather widget in Settings and no request is made.
- ESPN provides scores, and only if you add a team. The teams you follow are requested by name, so ESPN can see which ones they are and the address asking. It requires no account and no key. Follow no teams and nothing is ever requested from it; remove the Scores widget and the same is true.
- Sleeper and ESPN Fantasy provide fantasy football scores, and only for leagues you add. Your browser asks them directly: Sleeper by the username you type, ESPN by league ID. For a private ESPN league your browser includes your existing ESPN sign-in, which goes to ESPN and is never readable by the page or by us. Add no leagues and neither is contacted.
- ESPN Pick'em standings, if you add a Pick'em entry. Your browser asks ESPN for that entry by the ID in the link you paste, with no sign-in sent: ESPN serves an entry, its picks and its groups to anyone holding the ID, so treat the link as you would any shareable link. Add no entry and nothing is requested.
- Service status pages — GitHub's, Cloudflare's and any others you choose — are read directly from each service's public status page. They see the request and nothing else. Remove the widget and none is contacted.
- CoinGecko provides crypto prices, and only if you add a coin. Same shape: no account, no key, and no request at all unless you have asked for one.
- MaxFeeder, on Pro, and only if you set it up. Your browser fetches the feed from the address you give it, sending the API key you paste — the request goes straight there and never through us, so we never see the feed or the key. Both the address and the key live in your vault, encrypted like everything else in it. Leave it unconfigured and no request is made.
- Favicons. By default the page asks each bookmarked site for its own icon, and falls back to DuckDuckGo's icon service where that fails. You can restrict this to first-party requests only, or disable icon loading entirely, in Settings → Data. Bookmarks on your own network — a router, a NAS, anything at an address like 192.168.x.x, localhost or a .local name — are never contacted: their icon falls back to a letter, they are left out of the Frequent group, and the link checker skips them. The page does not scan your local network.
Deleting your account
Settings → Account → Delete account removes your encrypted vault, your device records and your login, and cancels any active subscription. It is immediate and cannot be undone. The local copy in the browser you are using stays until you clear it or reset from Settings → Data.
You can also export everything as JSON at any time from Settings → Data.
If you lose your password and recovery code
Your data becomes permanently unreadable, including by us. This is a consequence of holding no key, not an operational limitation, and no support request can recover it. Keep the recovery code shown when you sign up.
Children
launchitall is not directed at children under 13, and we do not knowingly create accounts for them.
Changes
If this policy changes materially, the date above changes and account holders are notified by email before the change takes effect.
Contact
Questions, deletion requests or privacy concerns: privacy@launchitall.com.