I built an alternative to Raindrop and Pocket

Local-first AI Knowledge Vault with End-to-End Encryption

Distribution model: Open Core. This repository is the MIT-licensed Core; Pro features identified in OPEN-CORE.md are proprietary and not included here.

Your personal knowledge vault — encrypted on your device, works offline, and stays yours. No accounts, no tracking, no one can read your data. Not even us.

Quick Start • Features • Free vs Pro • Documentation • Architecture • Security • Contributing

• Privacy First: Your data stays on your device, encrypted with AES-GCM + Argon2id

• BYO AI: Use any AI provider you want (OpenAI, Anthropic, Gemini, etc.) with your own keys

• Lifetime: One payment, no subscriptions or recurring fees

• Offline: Works without internet connection

• Open Source: Core is MIT-licensed, auditable and customizable

• No Tracking: Opt-in telemetry only, full control over your data

• End-to-end encryption — AES-256-GCM + Argon2id for secure vault storage

• Zero-knowledge vault — 24-word recovery phrase, tampering detection, fail-closed storage

• BYO AI keys — Provider keys stored encrypted in your vault, never on our servers

• No tracking — Opt-in telemetry only, works fully offline

• Client-side cryptography — All encryption/decryption happens in Web Workers, server never sees keys

• Offline-first — The app lives in your browser; your vault works without internet

• No cloud dependencies — Full Core functionality without external services

• Progressive Web App — Installable on any modern browser, plus browser extensions

• P2P sync (Pro) — Optional device-to-device sync over WebRTC; servers relay encrypted traffic, never content

• Multi-provider support — Gemini, OpenAI, Anthropic, Groq, Hugging Face, OpenRouter with your own keys

• Direct API calls — No proxy: the browser calls the provider you configure

• Free smart search — Fuse.js + semantic embeddings engine included in Core

• Pro AI surfaces (Pro) — Local model runtime, RAG orchestration, expert agents and flashcard generation

• Bookmarks & Notes — Organize your digital knowledge

• Interactive Knowledge Graphs — Visualize connections between concepts

• Advanced Search — Smart search across all your content

• Import / Export — JSON, JSONL, CSV, Markdown, HTML, Notion, Obsidian, and PDF

Most bookmark managers store your library in someone else's cloud in plain text. BookmarkForge keeps everything encrypted on your device (AES-GCM with an Argon2id-derived key), so your data is yours in the strongest sense: we couldn't hand it over even if we wanted to.

• Local-first — Your vault works fully offline. No server required.

• Zero-knowledge — Recovery phrase, tampering detection, fail-closed storage.

• P2P sync (Pro) — Device-to-device sync; servers relay encrypted traffic, never content.

• Open Core, MIT — Audit the public Core; Pro components are not included in this export.

• Node.js >= 24.17.0

• npm (comes with Node.js)

git clone https://github.com/bookmarkforge/bookmarkforge.git
cd bookmarkforge

npm install

npm run dev        # http://localhost:5173
npm run typecheck:prod

npm run lint

npm run test:fast

npm run test:slow

npm run build:ci

npm run check

Build for production: npm run build. See docs/architecture.md for the full topology: static web + signaling/licensing companion server.

This repository contains the MIT-licensed Core. The private distribution adds proprietary Pro components, unlocked at runtime by a signed license purchased from the official store:

Buy a Pro license: bookmarkforgeapp.com — $59 Early Bird (first 200 licenses) → $79 regular.

• Website:https://bookmarkforgeapp.com

• Documentation:https://github.com/bookmarkforge/bookmarkforge-core/tree/main/docs

• Security Policy:https://github.com/bookmarkforge/bookmarkforge-core/blob/main/.github/SECURITY.md

• Contributing:https://github.com/bookmarkforge/bookmarkforge-core/blob/main/CONTRIBUTING.md

• Private Repository:https://github.com/bookmarkforge/bookmarkforge-2026

• Architecture — System architecture and design decisions

• Security — Security model and best practices

• API Reference — Companion server API documentation

• OpenAPI Spec — OpenAPI 3.0 specification

• Documentation Index — Full documentation catalog

• Open Core Model — Licensing and feature boundaries

• Contributing — How to contribute to the Core

• Engineering Conventions — Code style and architectural rules

• Trademark Policy — Brand usage guidelines

• Core MIT License — Open source components

• Pro License — Commercial features

• English 🇺🇸 ·Español 🇪🇸

• PDF English 🇺🇸 ·PDF Español 🇪🇸

• The full set ships in 30 languages underdocs/ : seedocs/index.md .

┌─────────────────────────────────────────────────────────┐
│              Browser / PWA / Extension                   │
│  React 19 + TypeScript + RxDB + IndexedDB + WebRTC      │
└────────────────────┬────────────────────────────────────┘
                     │ HTTPS/WSS
                     ▼
┌─────────────────────────────────────────────────────────┐
│            Reverse Proxy (TLS, CSP, Static)              │
└────────────────────┬────────────────────────────────────┘
                     │
         ┌────────────┴────────────┐
         ▼                         ▼
┌─────────────────┐     ┌─────────────────┐
│  Web Frontend   │     │ Companion Server│
│  (React/Vite)   │     │   (Node/ws)     │
└────────┬────────┘     └────────┬────────┘
         │                     │
         │                     ├─► P2P WebSocket signaling
         │                     ├─► License endpoints (/api/license/*)
         │                     ├─► Health, CSP reports
         │                     └─► Opt-in telemetry
         │
         └─► Your AI Providers (BYO key)
              • Gemini, OpenAI, Anthropic
              • Groq, Hugging Face, OpenRouter
              • Ollama, WebLLM (local, Pro)

Cryptography: AES-GCM, Argon2id/HKDF, keys managed in Web Workers

• Client-first data — Vault data lives on the client

• End-to-end encryption — Encryption and decryption happen client-side

• Zero-trust model — Server never sees unencrypted data or AI keys

• Stateless services — No shared database or Redis in production

• Your AI keys are stored encrypted in your vault, never on our servers

• Vault content never leaves your device unencrypted

• No tracking — Opt-in telemetry only, no behavioral tracking

• IP privacy — Server logs never contain user IP addresses

• TLS termination at reverse proxy with HTTPS redirect and HSTS

• Content Security Policy (CSP) with strict allow-lists

• Secret scanning — Automated detection of leaked secrets in commits

• 460+ automated tests including security, crypto, and property-based tests

• Monthly DAST (OWASP ZAP) penetration testing

• CodeQL + Semgrep SAST analysis on every PR

Found a vulnerability? Please report it privately — see SECURITY.md. Please do not open public issues for security reports.

• Unit / Integration — Vitest suites for security, DB, and services
• E2E — Playwright specs across Chromium, Firefox, WebKit, and Android
• Open Core boundary —npm run check:open-core verifies no Pro code leaks into this export
• Performance budgets — Bundle size and runtime metrics enforced per feature

The code in this public repository is the MIT-licensed Core. You may run, study, modify and redistribute it under the terms in LICENSE. Proprietary Pro features and private infrastructure are intentionally excluded. The BookmarkForge name and logo remain protected by TRADEMARKS.md.

Running the Core for yourself or your team is permitted without payment.

Pro code is resolved two ways in this build, both enforced in CI by npm run check:open-core:

Behind the entitlement gate. Core components resolve the Pro services (encrypted backups, PDF/OCR extraction, P2P sync, and the proprietary AI surfaces — the local model runtime, RAG orchestration, expert agents and flashcard generation) throughsrc/services/pro-access.ts (MIT), which callshasProAccess()before fetching the Pro chunk. A Free user never downloads that code; the call rejects with a typedProUnavailableError that the UI presents as a "requires Pro" state or upgrade prompt, never a silent dead button. 2. Client-side AI boundary. Cloud providers are called directly by the browser with a user-supplied key; no server-side AI relay or placeholder is shipped. (The AI client tree is largely Core MIT: the BYOK cloud path and the embedding engine behind free smart search are open; seeOPEN-CORE.md for the exact Pro list.)

Reaching a Pro surface is never silent: the placeholder helper also dispatches open-core:pro-reached, and the refuses to hand out a placeholder as if it were real. Either signal opens the in-app "Available in Pro" panel (ProRequiredBoundary), which explains what happened and links to the Pro section with the current license price.

BookmarkForge ships 30 languages with complete UI translations. Each language has a Markdown source and a generated PDF under docs/. See docs/index.md for the complete list.

Core contributions are accepted under MIT. Do not send Pro code or copy third-party code with an incompatible license.

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature )
3. Make your changes
4. Run the gates (npm run check )
5. Commit your changes
6. Push to the branch (git push origin feature/amazing-feature )
7. Open a Pull Request

Before opening a change that crosses the Core/Pro boundary, document the decision and update the export gate. See CONTRIBUTING.md and AGENTS.md.

• Documentation — See thedocumentation index
• Issues — Report bugs onGitHub Issues
• Discussions — Join community discussions onGitHub Discussions
• Security — Report vulnerabilities privately viaSECURITY.md

Copyright © 2026 BookmarkForge

This Core is free software: you can redistribute and/or modify it under the terms of the MIT License in LICENSE.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

BookmarkForge v1.0.0 — Open Core: MIT Core + proprietary Pro