Privacy Policy

Introduction

Welcome to TabSlate. The TabSlate Chrome extension is developed by the TabSlate Team. We are committed to protecting your personal information and your right to privacy. This Privacy Policy comprehensively details our practices regarding user data collection, handling, storage, and sharing, in compliance with the Chrome Web Store Developer Program Policies. It applies to all information collected through our services, including our Chrome extension, companion web applications, and related backend sync infrastructure (collectively, "Services").

When you install our Chrome extension or create an account to synchronize your dashboard, you trust us with your browser and tab metadata. We do not inspect, collect, or store the actual contents of the web pages you visit. We only process the minimal metadata required to organize and sync your tabs and bookmarks across your devices.

Single Purpose Declaration: TabSlate has a single purpose: to help you organize, manage, and synchronize your browser tabs and bookmarks. All data we collect is strictly necessary to fulfill this single purpose and is never used for any unrelated purposes.

Data Collection

We collect information in two main categories: user-provided and automatically-collected data. The following summary outlines every category of user data we collect, where it is stored, who it is shared with, and why:

Personally Identifiable Information (email address, display name): Stored in our cloud database; shared with Flexprice (billing) and email providers (Resend/SES/SMTP); purpose: account management, billing, and email verification.
Web Browsing Activity (tab URLs, page titles, favicon URLs, OpenGraph titles, meta descriptions, selected text): Stored locally in IndexedDB and in our cloud database when sync is enabled; not shared with any third party; purpose: tab and bookmark synchronization.
Authentication Information (passwords, JWT tokens, refresh tokens, OTP codes): Stored locally in chrome.storage and hashed in our cloud database; not shared with any third party; purpose: secure account authentication.
Financial and Payment Information (subscription plan, billing period): Stored in our cloud database and Flexprice; shared with Flexprice; purpose: subscription management.
Technical and Session Data (IP address, browser type, extension version): Stored transiently in our rate-limiting layer (Redis/in-memory, 15 min–24 hr TTL); not shared with any third party; purpose: rate-limiting and security.
Anonymous Usage Analytics (event names only, no personal data): Stored in our self-hosted OpenPanel instance; not shared with any third party; purpose: aggregate product improvement.

No additional categories of user data are collected beyond those listed above. Each category is described in detail below.

1. Account Information: When you register, verify your email, or initiate a subscription, we collect your email address, display name, passwords (securely hashed), account status, and transaction/billing metadata. For TabSlate Cloud subscribers, your account ID, display name, and email address are also transmitted to our billing provider (Flexprice) to create and manage your subscription record.

2. Tab and Bookmark Metadata (Web Browsing Activity): To deliver the core sync capabilities, our browser extension reads your open tab URLs and page titles, tab group names and colors, collection names, bookmark URLs, and tag labels. Furthermore, when you explicitly save a bookmark or interact with the extension via our context menu or search overlay, we also extract specific page metadata (such as the page's OpenGraph title, meta description, favicon URL, and any currently highlighted text, i.e., selectedText) to enhance the saved item. Tab URLs, page titles, and these metadata items constitute web browsing activity as defined by the Chrome Web Store User Data Policy. This data is stored locally using IndexedDB (tabslate-db v2) and, when cloud sync is enabled, is securely transmitted to and stored in our PostgreSQL cloud databases solely to enable cross-device synchronisation. This data is never used for any purpose other than the tab and bookmark management features prominently described in the extension. Other than the specific metadata explicitly listed above, we do not collect or store the textual content, scripts, images, or DOM of any web page you visit.

3. Extension Permissions Disclosure: The extension declares the following browser permissions and uses them exclusively as described:

tabs: Reads the URL, title, favicon, and status of your open browser tabs to display them in the extension interface and synchronise them across devices. This constitutes web browsing activity and is used solely for the core sync feature.
tabGroups: Reads and updates browser tab group names, colors, and positions to display and synchronise your tab groups within the extension.
contextMenus: Adds a right-click context menu entry that lets you save the current page as a bookmark without opening the extension panel. No page content is extracted.
scripting: Used solely to inject the TabSlate search overlay — a keyboard-shortcut-triggered search interface — into the active tab when you explicitly activate it. The injected script renders a UI overlay and is removed when dismissed. It does not read, extract, copy, or transmit any content from the page.
storage: Persists your preferences, authentication tokens, and local tab/bookmark databases in the browser's sandboxed storage (chrome.storage.local and chrome.storage.session).
search: Submits the exact search text you type into the TabSlate search overlay or search box to your browser's default search provider (e.g. opening the corresponding results page in a new or current tab). This only happens when you explicitly submit a search query; TabSlate does not read your browsing or search history through this permission.
optional_host_permissions (<all_urls>): An optional permission, not granted by default, requested only when you activate the search overlay feature. It allows the overlay script to be injected into any active tab. No page content is read or transmitted at any point.

4. Session and Technical Logs: We automatically log connection details including IP address (used for rate-limiting, conditional Prosopo captcha validation, and security monitoring), browser type, extension version, and sync status codes. IP addresses are stored only transiently in our rate-limiting layer (Redis/in-memory) and expire automatically within 15 minutes to 24 hours depending on the operation. We do NOT track your browsing history or extract any DOM content from the pages you visit.

5. Anonymous Usage Analytics: We collect anonymous product usage events to understand how the extension is used in aggregate. The following specific event types are tracked: page_view (new tab page loads), bookmark_added, bookmark_imported, collection_created, workspace_created, group_saved, search_used, extension_installed, extension_updated, and sync_error (error signal only — sanitised, contains no personal data). No browsing URLs, tab content, account credentials, or personally identifiable information is included in any event payload. All analytics events are associated with a randomly generated anonymous identifier (tabslate-analytics-id) stored locally in chrome.storage.local. This identifier contains no personal information and cannot be linked to your account, email address, or identity. Analytics are processed exclusively by our self-hosted OpenPanel instance.

Data Handling and Use

We use your information strictly to operate, maintain, and secure the TabSlate Services. Specifically, we use it to:

Facilitate seamless, real-time tab and bookmark synchronization across your authorized devices.
Manage your user account, verify email OTPs (via SMTP, Resend, or SES), and perform JWT token authentication.
Validate subscriptions, calculate limits (such as collections, workspaces, or bookmarks), and process billing through our Flexprice billing integration.
Provide optional rapid full-text search by indexing your bookmarks and tab metadata within our secure, self-hosted MeiliSearch instance, strictly within our own infrastructure.
Enforce API rate-limiting and protect our infrastructure against bot spam and brute-force registration attempts using conditional captcha verification.
Investigate and resolve synchronization conflicts and technical performance issues.
Understand aggregate feature usage patterns through anonymous analytics to improve the extension's functionality and prioritize future development. No personal data or browsing content is used for this purpose.

Lawful Basis for Processing (GDPR): For users in the European Economic Area, our lawful basis for each processing activity is as follows: (a) Account Information — performance of a contract; (b) Tab and Bookmark Metadata for cloud sync — performance of a contract; (c) Security and rate-limiting logs (IP address) — legitimate interests in protecting our infrastructure from abuse; (d) Anonymous Usage Analytics — legitimate interests in understanding and improving our product. Where required by applicable law, we will seek your explicit consent before processing.

Data Storage and Retention

We securely store and retain your data using the following methods:

1. Local Storage: All active tabs, bookmarks, and configuration metadata are stored locally on your device within your browser's secure sandboxed storage (IndexedDB and chrome.storage). This data is isolated and cannot be accessed by other websites or extensions.

2. Cloud Storage (TabSlate Cloud): Once you register an account and start using our service, cloud synchronization is automatically enabled. Your metadata is then securely transmitted and stored in our managed PostgreSQL databases, operated on enterprise-grade cloud infrastructure. Data is encrypted at rest and in transit.

3. Data Retention: We retain your account information and synchronised data only for as long as your account is active. Items you delete (bookmarks, tab groups, collections) enter a 7-day soft-delete grace period (Trash) before being permanently removed from our databases. You can permanently delete your account directly from the TabSlate extension: open Settings → Account → Delete Account, confirm with your password, and a 30-day grace period begins. During this window you may cancel the deletion at any time simply by logging in again — no action required beyond signing in. After 30 days without a login, your account and all associated cloud data (synced tabs, bookmarks, workspaces, collections, tags, and account information) are permanently purged from our databases. Three email notifications are sent: one immediately upon request, one reminder 3 days before the deadline, and one confirmation after deletion is complete. Anonymous analytics events contain no personal data and are retained in our self-hosted OpenPanel instance; they are purged periodically and are not linked to your account.

We maintain a strict policy of never selling, trading, or commercialising your data under any circumstances. We share data only with the following specifically identified third-party sub-processors, each required to provide the core infrastructure of the Services:

Self-Hosted Infrastructure (iTech Tower, Hong Kong): Our Go API servers and PostgreSQL database are hosted on our own dedicated servers located in the iTech Tower data center in Hong Kong. Your synchronized tab and bookmark metadata is stored on these servers. As this is self-hosted infrastructure owned and operated by TabSlate, no third-party cloud provider has access to your data at the infrastructure level.
Billing System (Flexprice): To manage subscription capacities, payment options, and plans. TabSlate Cloud integrates with the Flexprice billing API. Your account ID, display name, and email address are transmitted to Flexprice to create and manage your subscription record. Flexprice is a third-party service provider contractually bound to process this data solely for billing purposes on our behalf.
Email Providers (Resend/SES/SMTP): For dispatching password reset OTPs and email verification codes.
Favicon Proxy Service (DuckDuckGo): To improve performance and privacy when rendering large icon data, we securely resolve domain names into favicons by requesting them from DuckDuckGo (https://icons.duckduckgo.com). Only the domain name of the saved URL is transmitted; no account information, tracking IDs, or browsing history is shared.
Security Tools (Prosopo): For verifying procaptcha tokens under high-risk traffic signals.
Analytics Platform (OpenPanel, self-hosted): We operate our own self-hosted OpenPanel instance to process anonymous extension usage events. Only an anonymous random identifier and one of the following specific event names are transmitted: page_view, bookmark_added, bookmark_imported, collection_created, workspace_created, group_saved, search_used, extension_installed, extension_updated, or sync_error. No account data, URLs, tab content, or personally identifiable information is ever included in analytics payloads. Our OpenPanel instance is operated exclusively by TabSlate and does not share data with any third party.

Chrome Web Store Limited Use Disclosure: TabSlate strictly complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

We do not use or transfer your data for any purposes other than providing or improving the extension's core functionality.
We do not use tab URLs, page titles, or any other web browsing activity beyond what is strictly necessary to operate the tab and bookmark synchronisation features prominently described in the extension.
We do not sell your data to third parties.
We do not use or transfer your data for personalized, retargeted, or interest-based advertising.
We do not use or transfer your data to determine creditworthiness or for lending purposes.

All sub-processors are legally bound to protect your data and are forbidden from using it for any other purpose. We may also disclose data to comply with binding legal orders or protect user safety.

Cookies and Tracking

We use cookies, session storage, and local storage keys (such as tabslate-auth, tabslate-auth-token, and tabslate-analytics-id) for authentication and anonymous product analytics. Authentication technologies are strictly essential: chrome.storage.session holds your short-lived JWT access token safely out of reach of ordinary content scripts, while IndexedDB stores your tab databases locally. The tabslate-analytics-id key is a randomly generated anonymous identifier used solely to associate anonymous usage events — it contains no personal information.

We do not use tracking or advertising cookies. For details on how we store and handle session identifiers, please review our comprehensive Cookie Policy.

Data Security

We employ premium, industry-standard security protocols to defend your data:

Encryption in Transit & at Rest: All API communications are strictly encrypted using HTTPS/TLS. Databases and backups use enterprise-grade encryption at rest.
Secure Token Handling: Access tokens use HMAC-HS256 signatures with a 7-day validity window and are stored exclusively in chrome.storage.session, which is automatically cleared when the browser is closed. Refresh tokens are 256-bit cryptographically random tokens with a 90-day validity; only their SHA-256 hash is persisted in our database. Email OTPs are 6-digit codes valid for 10 minutes, stored as bcrypt hashes and destroyed immediately after use. SSE stream tokens are strictly single-use with a 30-second validity and are automatically cleared upon connection.
Local Sandbox Separation: Our extension isolates user context securely. Sensitive tokens are restricted to newtab, background, and popup contexts, completely invisible to ordinary web page scripts.
Transaction Integrity: Synchronization is executed inside PostgreSQL transactions to guarantee absolute atomic consistency and protect against concurrency-related data leaks.

Children's Privacy

TabSlate is not directed at, and does not knowingly collect personal information from, children under the age of 13 (or under 16 in the European Economic Area and the United Kingdom, where a higher threshold applies under GDPR Article 8). Our registration flow does not include an age-verification gate; we rely on users to confirm they meet the minimum age requirement when creating an account.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us immediately at privacy@cs.tabslate.com. We will promptly investigate and, if confirmed, delete the relevant account and all associated data from our systems within 30 days.

Your Rights

Depending on your jurisdiction (such as under the GDPR or CCPA), you hold specific statutory rights regarding your personal information:

Access and Portability: You have the right to request a complete export of all sync metadata we hold.
Correction and Deletion: You can request rectification of inaccurate data. To permanently delete your account and all associated cloud data, use the self-service Settings → Account → Delete Account flow in the extension: confirm with your password, and your account will be scheduled for deletion after a 30-day grace period during which you can cancel by simply logging in. For edge cases where you are unable to log in, contact us at privacy@cs.tabslate.com.
Opt-out and Restriction: You may halt synchronisation by signing out or switching to local-only mode in your extension settings.

To exercise any of these rights, please contact our support desk at privacy@cs.tabslate.com. We will respond to your request within 30 days.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, product features, or applicable law. When we make changes, we will update the "Last Updated" date at the top of this policy. For material changes — such as collecting new categories of data or sharing data with new third parties — we will notify you via an in-extension notification or email before the change takes effect. We encourage you to review this policy regularly. Your continued use of the Service after a revised policy becomes effective constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please get in touch with us at:

Developer Entity: TabSlate Team Email: privacy@cs.tabslate.com