Privacy policy
Last updated 28 September 2026
The short version
Command-D stores the things you deliberately save, and the metadata needed to make them findable. No account, no email, no ads, no third-party tracking, no selling data. We count what people do (saves, opens, searches), never what they saved or searched. Delete removes immediately.
What we store
The items you save (links, text notes, images); metadata our enrichment fetches about saved links (page title, description, preview image, favicon, and for YouTube the video title/thumbnail); timestamps; which kind of client saved the item (Mac app, Android, web, API); and, when your device can provide it, the name of the app you saved from (on Mac: the app in the foreground when you press ⌘D). Anonymous identity is a random device token — we never ask who you are.
Usage counts
To learn whether Command-D actually helps people find things again, our own servers record small usage events per list: that an item was saved, opened, marked done or tagged, that a search ran and how many results it had, which kind of client did it, and which AI tool was called. Never the content, links, titles or search terms, and no IP address. No third-party analytics service is involved. Events are deleted after 13 months, and with the list they belong to.
Share links
Everything you save is private. Only when you make a share link can others see something: that one item, or the items under that one tag (link, title, description and preview image; never your other tags, notes, or where you saved it from). The link is random and unlisted, search engines are asked not to index it, and Stop sharing makes it stop working immediately.
Cookies and browser storage
One functional cookie holding your anonymous device token so your list opens on this browser. No analytics or third-party cookies. The list page also keeps a copy of the list it last showed in this browser's local storage, so it opens at once next time; it never leaves your device and is replaced on every visit.
Where it lives
Infrastructure runs on Vercel (hosting), Neon (database), and Vercel Blob (image storage). Fetching link previews contacts the saved site, YouTube’s and Reddit’s oEmbed services, and Google’s or DuckDuckGo’s icon service for site favicons — all from our servers, so your browser only ever talks to cmd-d.com and the image hosts of previews. If you connect an AI assistant via MCP, that assistant’s provider processes whatever items it queries — that connection only exists if you set it up.
Deletion
Deleting an item removes it from the database immediately. To erase an entire list, delete its items in the web app; for full identity erasure, contact us.