Legal

Privacy

Your boards and pages never go to a server of ours, so most of this page is about what stays on your Mac. The one exception is one you choose: asking Marble to explain a page, which is what an account is for. Here is all of it, plainly.

• Your boards, history and the pages you've read stay on your Mac.
• We never see which pages you open or what you search for, unless you ask Marble to explain something, and then only what's on your screen.
• No account needed, no sync, no ads from us, and we don't sell data.

On your Mac

Boards, history and the sidebar

Files on your Mac, in Library/Application Support/surf.marble.Marble. Nothing is synced to us. Delete that folder and they're gone.

Pages, cookies and logins

Marble is a real browser. Cookies, cache and logins live in a profile on your Mac, encrypted with your Mac's keychain, so you stay signed in after you quit. Each Marble profile has its own.

Finding pages by their words

So ⌘K can find a page by what it said, Marble keeps the first 32,000 characters of the last 5,000 pages you read, with a small picture of each. The search by meaning runs on a model inside the app. None of it leaves your Mac. Search result pages, notes and page source aren't kept.

Turn it off in Settings → Privacy → Find pages by their words, and it's deleted. Clearing your history clears it too.

Passwords and passkeys

Marble doesn't store passwords. Apple Passwords and 1Password keep them, and macOS asks before a page can use a passkey.

Importing from another browser

Marble reads your tabs, cookies and icons from the other browser's files on your Mac. Passwords aren't imported, and nothing goes to us.

Ads, trackers and cookie pop-ups

Blocked and answered with "no" by default, using lists that ship inside the app. Both can be turned off in Settings → Privacy.

What leaves your Mac

Usage counts

Marble tells us when it's opened and which features get used, like "Tidy Up" or "Fold", with the app version and a random number for your copy of Marble. Never the pages, titles, searches or anything on your board. It goes to PostHog in the EU, which doesn't keep your IP address.

Crash reports

If Marble crashes, it sends what went wrong in our code, the app version, your macOS version and Mac model to Sentry in Germany. Not your Mac's name, and not your pages.

There's no switch for usage counts or crash reports yet. We're adding one in Settings → Privacy.

Explain

Only when you ask it to explain something, Marble sends our server a picture of your Marble window as it is then, the words of the page you asked about (up to 12,000 characters), what you selected, and the words and pictures of anything you circled, with the heading and words around it. It also sends the titles and sites of the other cards in view, so an answer can connect them. Nothing from cards out of view. Once a drawing is done, Marble may send a picture of it, so the model can check its own work. Our server runs on Cloudflare and asks OpenAI for the drawing. First OpenAI's moderation model reads the words and the pictures of what you circled, and sexual content isn't drawn. OpenAI knows your account only as a random-looking number, so it can spot abuse without knowing who you are.

Explanations of your window aren't kept. For older versions of Marble, which send only the page, we keep the drawing for 30 days under a fingerprint of the question and the page, so the same question is answered again for free; the page's words aren't kept. OpenAI keeps what it's sent for up to 30 days to catch abuse, and doesn't train on it.

Your Marble account

Only if you sign in, which is only for Explain. We keep your email, your plan, how many explanations you've used, when you signed in, and Paddle's number for you if you pay. Sign-ins are kept as a fingerprint that can't be turned back into one. We email you a code with Loops to sign in, a welcome when the account is new, and a thank-you when you start paying for Plus or Studio. Now and then we may also write about something that matters for how you use Marble, like a big change to Explain or your plan. Never ads, never more than that, and every one of those has a link to stop them. We keep a fingerprint of your network address for a day so no one can send a flood of codes. Delete the account in Settings → Account and all of it goes.

Paying for Plus or Studio

Paddle takes the payment, as the merchant of record. Your card and address go to Paddle, never to us; we learn that you paid, until when, and Paddle's number for you.

Update checks

A few times a day Marble asks marble.surf whether there's a new version. The request carries your version and a random number the updater makes. After an update with something new to tell, Marble opens that release's notes from marble.surf once, as a card on your board. That page measures nothing.

Searching the web

Text you type that isn't an address goes to Google as a search, in the card, like in any browser. Marble doesn't send what you type while you're typing.

Pictures in ⌘K

For pages without a picture in view, Marble fetches the preview picture the site offers for sharing, straight from that site, without your cookies. Only while Find pages by their words is on.

The changelog email

Only if you type your email in Marble or on this site. We send it with Loops, and you can unsubscribe from any email.

This website

Cloudflare hosts marble.surf and the downloads. PostHog counts visits and records how people move around the site, with anything typed hidden, so we can see what's confusing. Recordings are deleted after 30 days. It sets a cookie to tell visits apart. When you download Marble we note the country and the page you came from.

Who we share with

PostHog (usage, EU), Sentry (crashes, Germany), Cloudflare (hosting and Marble's server), Loops (email), OpenAI (Explain) and Paddle (payments for Plus and Studio). Nobody else, and we don't sell anything to anyone.

Your data, your call

Ask us what we have about you, or ask us to delete it, at [email protected]. A person reads every email. Usage counts and crash reports carry a random number, not your name, so we can't look you up by them.

Changes

When Marble starts sending something new, we'll say so here and in the changelog before it ships.