Skip to content
DocumentationHelpFROpen my Rynqu

Security & Privacy

Your links belong to you

When you entrust your links to Rynqu, you're trusting us. Here's how we earn it.

Encryption at rest
HTTPS only
Hashed API keys

Where your data lives

Your bookmarks and account information are stored in a PostgreSQL database hosted on Neon. The site runs on a Hostinger VPS and public connections use HTTPS. Exporting your data is still useful: service availability does not replace a personal copy.

Files used by some features, including images and screenshots, use Vercel Blob. Saved pages may also display images hosted by their original websites.

How we protect access

Passwords

Your password is hashed before storage and is never stored as plain text. To replace it, use “Forgot password” on the sign-in page.

Sessions

Better Auth manages sign-in sessions and their expiration. Sign out after using Rynqu on a shared device.

Google OAuth

Google sign-in goes through Google: Rynqu does not receive your Google password. Use the Google account associated with your Rynqu account.

API keys

Your keys (format sk_xxx) are hashed with SHA-256 before storage. If you lose a key, we can't recover it — that's intentional. Generate a new one from settings.

Personal, shared and public data

Access to resources depends on the signed-in account and the permissions of the relevant workspace. Members of shared workspaces can access content allowed by their permissions.

When you publish a page or share a public link, its content becomes accessible to people with that access. Check visibility and content before sharing.

AI features: depending on the feature, content needed for search, summaries or generation is sent to the AI providers configured for Rynqu. See Rynqu’s privacy policy for information about data processing.

Delete your account

Go to Me → Account → Delete my account and confirm with your account email address. Export the data you want to keep first.

  • Deletion removes the account and related database records, including bookmarks, folders and sessions.
  • Account deletion does not guarantee immediate removal of every associated file or backup copy. Contact us through Help for requests about this data.
  • This action is permanent: keep your export before confirming.

Report a vulnerability

Report a problem through Help and the “Give feedback” form. Describe the steps and affected page without including passwords, API keys or recovery links.

Next

MCP Server

View MCP