Privacy policy
Operator: GUREVEIL · Woo-jeong Hong
Privacy policy
Last updated: November 3, 2026
Local bookmarks, private collections, notes, preferences and device backgrounds are kept in browser storage. The browser extension uses its own local storage. Links and uploaded files are sent to our services when you enable supported cloud features, publish a curation or request page information.
For eligible Curator and Pro accounts, the private library is synchronized through Cloudflare D1. Uploaded thumbnails and enabled Pro background files use Cloudflare R2. Published curations and their associated links, descriptions and images are publicly accessible.
The browser extension stores open and recently closed tab URLs and titles on this device for tab recovery. It excludes incognito tabs; disabling recent-tab collection deletes this history. This history is not uploaded to our server. Saving entries as bookmarks or a collection follows the library’s normal storage/sync rules. Screenshots captured for link thumbnails are initially stored locally in the extension.
The browser extension runs on the pages you visit only to show its save panel, bundle drawer and search overlay. It reads a page's title, description, preview image or a screenshot only when you save that page or ask for its information, and sends them to MOALIER only as part of that save. It does not read or transmit other page content or record your browsing activity, apart from the device-only tab recovery list described above.
To keep the New Tab page signed in to the same account as the website, the extension reads only MOALIER's own sign-in cookie and keeps a short-lived session token in memory. The token is never written to extension storage or sent to other sites. Importing browser bookmarks reads them once at your request; the extension never creates, edits or deletes browser bookmarks.
Gureveil runs Better Auth to process account identifiers, email addresses and sign-in sessions. If you sign in with Google or Apple, we receive the name and email address that provider shares; with Apple you can hide your email, in which case we receive an Apple relay address. Sign-in is shared across Gureveil services through a secure cookie on gureveil.com. Each service controls access to its own data and paid features.
CREEM processes your email, payment method and billing country for purchases. MOALIER keeps subscription/customer identifiers, status, billing period and storage units to manage access; it does not receive full card details.
Google Analytics 4 also measures site traffic and public curation views/link clicks, including embedded iframes. We send page categories, public curation references, destination hostnames and referrer origins, excluding private library URLs, search terms and account IDs. Google may process browser/device information and analytics cookie identifiers; Google signals and advertising personalization signals are disabled.
We measure our own MOALIER ads. When you arrive from one, Google Analytics tells Google Ads whether you then went to an extension store or reached the welcome page the extension opens once, right after it is first installed. This relies on Google's ad-click and analytics cookies on the MOALIER website. The extension sends nothing with that page and its data is never used for advertising. This measurement is not used to personalize ads.
Google AdSense ads appear only in one slot below the links on public curation pages. We request non-personalized ads, and Google may use cookies, IP addresses and device information to serve ads, measure them and prevent fraud. Ads are not shown to Pro members, on curations by Pro curators, or to authors viewing their own curations. Where consent is required (such as the EEA, UK and Switzerland), Google's consent message lets you choose. See https://policies.google.com/technologies/partner-sites for how Google uses information from partner sites. My Space, the extension and the mobile app show no third-party ads.
Personalization is off unless you turn it on. When MOALIER offers personalized recommendations and ads, signed-in users can turn them on in Account settings; visitors who are not signed in are never included. With personalization on, we record only two kinds of activity: what you do with public curations (the curations you open, the links you click in them, and the curators, curations and topics you follow or save) and the words you type into MOALIER search on the website and app. We record the search words only, not your library's contents or which of your links matched. We never use your private library, notes, uploaded files or anything collected through the browser extension, its New Tab page or its search overlay. Gureveil services use this information to recommend curations and to choose ads and promotions for you.
With personalization on, the MOALIER website also lets Google Analytics and Google Ads use your visits to build advertising audiences, so Google may show you MOALIER or Gureveil ads on other sites and apps (remarketing). Google then processes cookie identifiers, device and browser information and the MOALIER pages you visit. We do not send your email, name, search words or private library to Google. The mobile app does not take part in remarketing.
Personalization records are kept for up to 12 months. Turning personalization off stops collection and remarketing from MOALIER, and the records already kept are deleted within 30 days; deleting your account deletes them as well. You can also manage Google's ad personalization at https://myadcenter.google.com/.
Background photo search uses Pexels and Unsplash through the server; the search term is sent to the selected provider. Images, videos and external thumbnails loaded directly from third-party sites may disclose your IP and browser information to those sites. Their privacy policies apply to those requests.
If you turn on music in Home settings, your music settings stay on this device unless you are on Pro and turn on Home music in cloud storage; then the settings and the music files you add are stored in our cloud storage (Cloudflare R2) so your other devices can download and play them, and the files count toward your storage. Otherwise your music files stay in this browser. Music MOALIER provides streams from our storage; we do not record what you play. When you add a YouTube link, we read its title from YouTube once and save it, and a YouTube player (youtube-nocookie.com) loads only while one of your YouTube links plays; YouTube then receives your IP address and browser information under Google's privacy policy. Nothing plays on its own unless you turn on Play automatically.
If you ask to be notified when the mobile app or the extension for another browser is released, we store your email address, language, the requested app or browser and (when signed in) account ID to send that update. The server also stores a hashed signup source and short-lived attempt counts to limit abuse. We use your address only for the requested update and remove the mailing list after delivery and reconciliation. You can withdraw your request through support before release. Delivery uses Resend.
If you follow curators or curations, we store those follows and the updates they create for you (kept for 90 days). If you allow notifications in the mobile app, we store the device's push token, platform and language with the app session that registered it, and Google Firebase Cloud Messaging delivers the notification. Notifications contain the curator name, the curation title and a link, never your email or account ID. The device is removed when you sign out, when the session ends or when you turn notifications off.
Feedback and bug reports store your submitted content, reply email (if provided or available on your account), account identifier for signed-in submissions, and browser information only when you choose to include it. Reports are private and accessible to administrators for support and product improvements. Contact support to request deletion.
Local data remains until you delete it or clear storage. Account, cloud-data and privacy deletion requests can be sent to support. Billing records may be retained where required by law or by CREEM. Retention periods and international processing details depend on the relevant provider and the operator’s published operational policy.
Gureveil operates authentication using Better Auth; Google and Apple provide optional sign-in. Cloudflare provides the database, hosting and file storage, and CREEM acts as Merchant of Record. Google also provides Google Analytics 4 traffic analytics, AdSense ads on public curation pages, Google Ads measurement of which MOALIER ad clicks lead to an extension store visit or installation, Google Ads remarketing for signed-in users who turn on personalization, and Firebase Cloud Messaging for app notifications. These providers may process data outside your country. Contact the operator for access, correction, deletion and other privacy requests.
We do not sell personal data and do not provide the personal data we hold to advertising networks. AdSense on public curation pages works through Google's own cookies as described above. Google receives your MOALIER browsing for remarketing only if you turn personalization on, and turning it off stops this. Information received through browser extension APIs is used only to provide the features described here, is never used for advertising or personalization, and adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.