Last updated: 2026-10-12
Maple Backup is a browser extension that automatically creates local, point-in-time backups of your bookmarks. This page explains what data the extension accesses, where it goes, and what it does not do.
Maple Backup uses your browser's Bookmarks API to read your bookmarks — titles, URLs, and folder structure — so it can create scheduled backups and let you view or export past versions.
All backups and settings are stored locally on your device, using your browser's built-in storage. Nothing is uploaded anywhere by default.
Your preferences (backup frequency, display language) are stored locally on your device and are not synced by Maple Backup.
This extension has no server of its own. It does not transmit your bookmarks, backups, or any other data to the developer. There is no analytics, tracking, or advertising code of any kind. The only exception is Cloud Backup, described below, and only for whichever provider(s) you choose to turn on.
Maple Backup can optionally save copies of your local backups to a cloud storage provider of your choice: Google Drive, Dropbox, Nutstore (坚果云), or Koofr. Each provider is off by default and only starts after you explicitly click "Connect" for that specific provider in Preferences — connecting one never turns on any of the others.
When a provider is connected, each backup (scheduled or manual) is also uploaded to a folder named "Maple Backup" in that provider's storage, in the same bookmarks file format as the Download button produces. If no provider is connected, nothing is ever uploaded.
Google Drive and Dropbox are connected via that provider's own sign-in screen (OAuth) — Maple Backup never sees or stores your account password for these. Nutstore and Koofr don't offer this kind of sign-in, so instead you generate a separate "app password" in your own Nutstore/Koofr account settings and enter it directly into Maple Backup; this app password is stored locally on your device (see "Where your data is stored" above) and used only to authenticate uploads to your own Nutstore/Koofr account. It is never sent anywhere except directly to that provider's own servers.
Every provider uses the narrowest access mechanism it offers: Google's drive.file scope and Dropbox's dedicated "App Folder" access type both restrict Maple Backup to only the files and folders it creates itself — it cannot browse, read, or modify anything else already in your account. Nutstore and Koofr are accessed over WebDAV, writing only inside the one "Maple Backup" folder created for this purpose.
Clicking "Disconnect" for a provider stops future uploads to it and, for Google Drive/Dropbox, revokes this extension's access to that account (for Nutstore/Koofr, it forgets the stored app password on this device — you can also revoke the app password itself from your Nutstore/Koofr account settings at any time). Backups already uploaded are not deleted automatically — you can remove them yourself from that provider's own storage at any time.
Maple Backup never downloads or restores your backup contents from any cloud provider. Every connection is a one-way backup destination — if you ever need a file back from one, you retrieve it yourself directly from that provider's own website.
When you click Download on a backup, a bookmarks file is saved to your own device's Downloads folder, only when you explicitly request it. That file stays on your device and is never sent anywhere by the extension.
| Permission | Why it's needed |
|---|---|
| bookmarks | Read your bookmarks to create backups. |
| storage | Store backup history and your preferences locally. |
| alarms | Run the scheduled daily (or every N days) backup. |
| unlimitedStorage | Allow backup history to grow beyond the browser's default storage limit. |
| identity | Sign you in to your own account, only if you choose to connect Google Drive or Dropbox. Not used for anything else. |
Maple Backup also requests network access to each cloud provider's own servers, but only for the ones you actually connect — these are "optional" permissions Chrome asks you to approve individually the first time you click Connect for that specific provider, not upfront at install:
| Provider | Domains accessed |
|---|---|
| Google Drive | googleapis.com (always requested — required for the extension to load at all, since Drive support predates this optional-permission approach) |
| Dropbox | api.dropboxapi.com, content.dropboxapi.com |
| Nutstore | dav.jianguoyun.com |
| Koofr | app.koofr.net |
If this policy changes, the "Last updated" date above will be revised. Continued use of the extension after changes means you accept the updated policy.
Questions or concerns about this policy can be sent via the extension's feedback link on the Chrome Web Store listing, or see the homepage and Terms of Service for more.