Privacy Policy

This policy explains how Tabfinity ("we") handles personal data across the Tabfinity browser extension (the "extension"), the Tabfinity API it talks to (the "service"), and this website. It applies where we decide how data is handled; where Chrome or Google handles data under their own policies, we say so.

Questions, requests and complaints: hello.tabfinity@gmail.com. The Terms of Service cover the rules for using Tabfinity.

• What you save — bookmarks, folders, notes, icons, settings and the records of the built-in tools — stays in your own browser. We do not receive it.
• An account is optional and only needed for the trial and paid plans. It stores your Google account details, your plan and your subscription status.
• Payments are handled by Paddle, our merchant of record. Card details never reach our servers.
• The extension contains no analytics, no advertising and no tracking, and we do not sell personal data.
• The extension makes a few direct requests to third-party services for weather, search suggestions and bookmark icons. Those are listed in full below.

The extension is a new tab page, and its storage is Chrome itself. It keeps its records as ordinary bookmarks inside a "Tabfinity" folder in your Chrome bookmarks — one folder per tab, plus folders that hold your notes, custom icons and descriptions, the subscription tracker and the warranty keeper. Because that is Chrome's bookmark tree, Chrome may sync those records across your devices if you have bookmark sync switched on; that sync is between you and Google and is governed by Google's privacy policy.

The extension also uses two Chrome extension storage areas:

chrome.storage.local (kept until you remove it)

Your session token and its expiry, the id of the account it belongs to, the date the welcome screen was last shown, cached weather for your area, and a marker used to housekeep custom icon data.

chrome.storage.session (cleared when the browser session ends)

Your account details and plan for the current browser session, so the extension does not re-fetch them on every new tab.

Custom background images you upload are stored as data URLs in Chrome extension storage. Weather is cached together with the approximate coordinates it was fetched for.

Uninstalling the extension removes its extension storage. Records held in your Chrome bookmark tree remain there until you delete them, and are visible in Chrome’s bookmark manager.

Signing in is optional and uses Google. If you sign in, the extension sends the Google access token it obtained to our API, which verifies it with Google and creates or updates your account. We store:

• Your Google account identifier, email address, display name and profile picture URL.
• Your plan (free, trial, monthly or yearly), when it started, when it expires, whether a cancellation is scheduled, and whether you have used the free trial.
• Account timestamps (created and last updated).
• For subscriptions: the Paddle customer and subscription identifiers, the price identifier, the plan, the subscription status, and the billing period dates (described under Payments below).

We do not store passwords: there are no Tabfinity passwords, because authentication is delegated to Google. We do not ask for or store your address, phone number, precise location, or any payment card data.

Sessions are signed tokens that expire after seven days; there is no server-side session record to expire, and signing out revokes the Google token held by Chrome and clears the stored token from the extension.

• Signing you in and keeping you signed in until your session expires.
• Showing your current plan and deciding which features it includes, such as the free plan’s tab limit and the premium tools.
• Providing the free trial once per account, and managing subscription state after a purchase, cancellation or resume.
• Responding to support requests, and keeping records we are required to keep for tax and accounting purposes.
• Protecting the service — for example verifying that a subscription webhook really came from our payment provider.

We do not use account data for advertising or profiling, and we do not sell or rent it.

Paid plans are sold through Paddle, which acts as merchant of record and handles the checkout, payment method and invoices. When you pay, Paddle collects your billing details and payment method; we never see or store your card number. Paddle processes that data under Paddle’s privacy policy.

What we receive and store from Paddle is limited to your email address, the Paddle customer and subscription identifiers, the price and plan purchased, the subscription status, and the start, end and cancellation dates of the billing period. The extension’s checkout opens our API’s checkout page with your session token so it can request the correct prices for your account; the token is removed from the address bar as soon as the page has read it.

The extension talks directly to a small number of external services to provide specific features. These requests come from your browser, so those providers see your IP address and whatever that request contains, as described by their own policies:

Google

Signing in with your Google account and revoking that access when you sign out; confirming the account email during sign-in; fetching the icon shown for a bookmark, which sends the saved address to Google’s favicon service; and returning search suggestions as you type in the new tab search box, which sends what you have typed so far. Google’s handling is described in Google’s privacy policy.

ipwho.is

An approximate location (city and coordinates) derived from your IP address, used to show the weather for where you are.

Open-Meteo

The weather forecast, requested with those approximate coordinates.

Google Fonts

A font file used by the whiteboard tool.

Our own API is contacted only for sign-in, plan and trial actions, subscription actions, and the checkout page. Bookmark content is never sent to it.

This site is informational. It sets no cookies, runs no analytics or tracking scripts, and loads no third-party resources: fonts are served from this site rather than from an external font host. Our hosting provider may keep standard server logs (such as the requested page and the request’s IP address) for security and operations.

• No analytics, telemetry or crash reporting in the extension or on this site.
• No advertising, ad networks, tracking pixels or third-party cookies.
• No selling, renting or sharing of personal data for marketing.
• No access to your browsing history — the extension does not request the history permission and does not read the pages you visit.
• No reading or changing of websites you visit: the extension has no content scripts and injects nothing into pages.
• No collection of passwords, card numbers or government identifiers.

Data in your browser stays until you delete it, uninstall the extension, or clear the records in your bookmarks. Account data is kept while your account exists; subscription records are kept for as long as needed for tax, accounting and dispute purposes. There is no automatic deletion after a period of inactivity.

We have no self-service deletion control yet. To have your account and its server-side data deleted, email hello.tabfinity@gmail.com from the address you signed in with, and we will confirm once it is done. Records stored in your own browser are yours to remove at any time.

You can use the core extension without an account, sign out at any time, and cancel a subscription whenever you like. Depending on where you live, you may also have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive it in a portable form. Send those requests to the address above; we may need to verify that the request comes from you.

Sign-in is delegated to Google, we store no passwords, and sessions are signed tokens that expire. Subscription webhooks are verified by signature before they are trusted. Production data is reachable only through the API, and connections to it are encrypted in transit (HTTPS). No system is perfectly secure, so please use a strong Google account password and keep your browser up to date.

We and our service providers may process account and subscription data in countries other than the one you live in, including where our servers and our payment provider operate. Where that happens, we rely on the safeguards our providers put in place for such transfers.

Tabfinity is not directed at children and is not intended for anyone under 13. We do not knowingly collect personal data from children; if you believe a child has created an account, contact us and we will remove it.

When the product changes, this policy changes with it. The "Last updated" date at the top always reflects the current version, and material changes will be noted in the extension or on this site.