Privacy Policy
Updated: October 21, 2026
histre is made by histre inc, a company in San Francisco. This page says what we store about you, what we do with it, who else sees it, how long we keep it, and how you can take it with you or delete it. Questions go to support@histre.com.
What we store
Your account. Your email address, a username, a password (stored as a hash, never in plain text), and settings such as your theme and time zone. If you sign up through Google or another provider, we get your email address and name from them. At sign-up we ask Google reCAPTCHA for a bot-likelihood score and keep that score.
What you save. Bookmarks, notes, highlights, tags, collections, and anything you import, such as bookmarks from another service or your ChatGPT conversations. This is the point of histre, and it stays yours.
Browsing history, when you turn it on. The extension can record the pages you visit: address, title, favicon and time spent. It is used to build your tree-style history and nothing else. You can pause it any time in the extension or in your account settings, and you can delete any part of it.
Page text, for deep search. The extension can also keep the text of pages you visit so that search can find things you merely read.
Connected services. If you connect Slack, Notion, HubSpot, Salesforce, Telegram, Twitter or IFTTT, we store the access token that lets histre talk to that service, and the data that passes through the integration you set up. Disconnecting removes the token.
Payment. Stripe handles cards. We never see your card number. We keep your Stripe customer ID, your plan, and the billing events Stripe sends us.
Server logs. Like every web service we keep ordinary request logs for troubleshooting. They are deleted promptly.
How we use it
- To run histre: show you your things, search them, sync them to the extension, share what you choose to share.
- To answer AI requests you make. Nothing goes to an outside AI provider unless you ask for it, for example by pressing Ask AI or turning on automatic tags. Models running on our own servers may process your content to power features such as search.
- To email you. Account emails (receipts, password resets, deletion confirmations) cannot be turned off. Other emails have an unsubscribe link.
- To find and fix problems, and to stop abuse and spam.
We do not read your private notes, highlights or history. The exceptions are when you ask us for help with something specific, or when we have to look into a report of abuse.
What we never do
- We do not sell, rent or trade your data. Nobody pays us for it.
- We do not show ads, and we do not run advertising trackers.
- We do not follow you around other websites. The extension only records what you have turned on.
- We do not send your content to an outside AI provider on our own initiative.
Who else sees it
A short list of companies we use, and what each one gets.
- Stripe processes payments and holds your card details.
- Postmark delivers our emails and sees the address and content of each one.
- OpenAI, Anthropic and Google answer AI requests. When you make one, the text needed for that request, such as the page you are asking about and your question, goes to the provider of the model you chose, under that provider's API terms. If you use your own API key, the request goes under your account with them.
- Sentry receives error reports, which can include your account ID, email address and the request that failed.
- Google reCAPTCHA checks for bots at sign-up.
- Page-view counting runs on our own server with GoatCounter. It sets no cookies and does not identify you.
- Hosting and backups. Our servers are in the United States. Encrypted backups are stored with Hetzner in Germany.
Beyond these, your data goes where you send it: to people you share a collection with, to members of your team, to the public when you make something public, and to a service you connect.
We will disclose data if the law requires it, for example a valid court order, or if it is necessary to protect our users or defend our rights. If histre inc is acquired, merges with another company, or sells the histre product, your data goes with it, and the new owner takes it under this policy. We will tell you before any change to how it is used.
Public content
Everything you save is private by default. A collection you mark public gets its own page and an RSS feed, and your member page lists what you have made public. Public highlights quote the page they came from. You can make anything private again at any time, after which it disappears from those pages. Copies that others made while it was public, or that search engines cached, are out of our hands.
How long we keep it
As long as you have an account, unless you delete something sooner. Raw browsing data from the extension is processed into your history and then deleted. Backups are kept for up to six months, so anything you delete lingers in encrypted backups for at most that long before it is gone for good. Billing records are kept as long as tax law requires.
Deleting your data
You can delete a single note, highlight, bookmark or collection from the app or the extension. In your account settings you can delete whole categories at once, for example all history, or all notes older than a month. Deleting is permanent; there is no recycle bin.
You can delete your whole account from your account settings. That removes everything: your content, your history, your AI requests, and your account itself. It happens right away on our live systems, and falls out of backups within six months. The only things that remain are the billing records the law makes us keep and the records Stripe and Postmark hold under their own policies. If you had a paid plan, cancel it first or we will cancel it for you.
Taking your data with you
From your account settings you can request an export of everything you have saved, delivered as a download link by email. Any collection can be exported as a CSV. And our API gives you everything the extension can see, with a token you can create in your settings.
Your rights
Depending on where you live, the law gives you the right to see the data we hold about you, to get a copy, to correct it, to delete it, and to object to some uses. The tools above are how we honor those rights: export and the API for access and copies, the editor for corrections, and the delete tools for deletion. They work for everyone, not only where the law requires them. If you believe something about your data cannot be reached through them, email us.
If you are in the European Economic Area, the United Kingdom or Switzerland: histre inc is the data controller. We process your data to provide the service you signed up for, and where needed for our legitimate interests in keeping the service secure and working, as described above. Your data is processed in the United States; by using histre you accept that transfer. You can complain to your local data protection authority.
If you are in California: we do not sell or share personal information as those terms are defined in California law, and we have not done so in the past twelve months. We do not treat you differently for exercising your rights.
Cookies
We use a session cookie to keep you signed in, a security cookie that protects forms, and a cookie or two for preferences such as your theme. That is all. No advertising cookies and no cookies from other companies.
Security
Connections are encrypted, passwords are hashed, backups are encrypted, and access to production systems is limited to the people who run them. No service can promise perfect security, and we do not. If we learn of a breach that affects your data, we will tell you.
Children
histre is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, email us and we will delete it.
Changes
When this policy changes we post the new version here and update the date at the top. If a change affects how your data is used, we will email you first.
Contact
support@histre.com
histre inc
c/o INSSTANT LLC
28 Geary St. Suite 650 #5459
San Francisco, CA 94108