Privacy policy

Dingding for iOS, iPadOS and macOS · Last updated 12 November 2026

Dingding connects your device directly to your own linkding server. The app does not send your bookmarks or API token to the developer. It has no advertising, analytics SDKs, or developer-operated bookmark service.

What stays on your device

Your server address and preferences are stored locally. Your API token is stored in Apple’s Keychain and shared with Dingding’s extensions so they can save to your server. The app keeps local bookmark and tag data, tag-usage history, and cached website images to support browsing and tagging.

These local stores are shared between the app and its own extensions, not with unrelated apps. Device backups and system-managed storage are subject to your Apple device and backup settings.

What is sent to your linkding server

Dingding sends your API token to authenticate requests to the server you configure. Saving and editing sends bookmark URLs, titles, descriptions, notes, tags, and bookmark settings to that server. The app also requests your bookmarks and tags to display and search your library.

The server operator can access the data stored there and may retain server logs, including your IP address. You choose that operator: it may be you or a hosting provider you use. The developer does not receive this data unless you separately choose a server operated by the developer. Use a server and hosting provider you trust.

Use HTTPS to encrypt traffic. If you explicitly configure an HTTP server, your API token and bookmarks travel without transport encryption; the app warns about this in Settings.

Requests to websites

To fill in a bookmark’s details, Dingding may contact the saved website and its metadata endpoints directly from your device. It may also load preview images and favicons. Supported sites, such as YouTube, Reddit, X, Vimeo, and Bluesky, may be contacted through their public page or metadata APIs.

Those websites receive the requested URL or content identifier and normal network information, such as your IP address and request headers. Their own privacy policies and retention practices apply. These requests do not pass through a developer-operated proxy.

When you open a page, its website may load third-party content, set cookies, or collect information under its own policy, as it would in a browser. The built-in Mac browser stores website data locally; you can remove its cookies, cached files, and site storage using Clear Website Data in the browser settings. That does not delete your bookmarks or affect Safari’s separate data.

Removing known tracking parameters makes saved URLs cleaner; it does not block all website tracking.

Apple Intelligence

On supported devices, the optional tag-suggestion feature uses Apple’s on-device Foundation Models framework. Page text and candidate tags are processed on the device for these suggestions. Dingding does not send them to a developer AI service or a third-party cloud language model. You can disable Apple Intelligence suggestions in the app’s Settings.

No app analytics or advertising

Dingding does not integrate advertising networks, analytics SDKs, third-party crash-reporting SDKs, or cross-app tracking. The developer does not collect your bookmark library, browsing history, API token, or app-usage telemetry through the app. Apple may provide App Store analytics or diagnostics according to your Apple settings and Apple’s privacy policy.

Your choices and deletion

• You can change your configured server or remove the API token in the app’s Settings.
• You can edit and delete bookmarks through the app or your linkding server. Deletion on the server follows that server’s retention and backup policies.
• You can disable automatic website-tag reuse, tracking-parameter removal, and Apple Intelligence suggestions in Settings.
• You can revoke an API token on your linkding server to stop access with that token.
• Local app data can be removed using your device’s app-data controls. Uninstalling the app does not delete bookmarks on your server, and Keychain entries may survive uninstalling; revoke the token on your server if needed.

If you contact support

If you email the developer, the email address, message, and any attachments you choose to send are used to respond and investigate the issue. They are kept as needed to handle the request and related follow-up. Do not include API tokens or private bookmark data. You can ask about or request deletion of your support correspondence at the address below.

This website

The Dingding product and privacy pages contain no analytics scripts, advertising, or embedded third-party media. The web host may process ordinary access logs, such as your IP address, requested page, and request time, to deliver and secure the site. Opening an external link is governed by that website’s policy.

Changes and contact

Updates to this policy will appear here with a revised date. Dingding is developed by Tomáš Kafka. For privacy questions or support, email support@tomaskafka.com.