Privacy Policy

TabOnion only captures tabs you choose.

TabOnion is designed as a local-first Chrome extension for saving, closing, restoring, and organizing browser sessions. This policy explains what data TabOnion handles, what stays local, what may be sent to TabOnion services, and what is never collected. TabOnion does not export cookies, passwords, form input values, or third-party session tokens.

Effective date: April 30, 2026

Summary

Information TabOnion handles

When you use the extension, TabOnion may handle the following information to provide user-facing features:

• Selected tab titles and URLs, used to save and restore browser sessions.
• Session metadata such as capture time, saved session count, source count, starred state, trash state, and collection membership.
• Collection names and session names that you create locally.
• Optional Markdown or readable page extracts only when you explicitly use Extract Content.
• Optional AI-ready summaries or source maps only when you explicitly generate them.
• Optional Pro access state, trial state, referral state, and entitlement status when you use membership features.

What stays local

Core TabOnion features are local-first. Capture, restore, search, basic collections, trash recovery, and local session organization are stored in your browser unless you choose an explicit export, sync, membership, referral, feedback, or backend-connected feature.

Information sent to TabOnion services

TabOnion may contact backend services for these limited purposes:

• Trial, Onion Code, referral, and Pro entitlement verification.
• Encrypted sync if you enable it.
• Feedback or support messages if you submit them.
• Invite landing-page visit events for campaign integrity.

Membership and growth endpoints may receive technical identifiers such as an install identifier, device key thumbprint, entitlement ID, redemption ID, source type, campaign tag, channel tag, result code, and timestamps. These are used for entitlement verification, abuse prevention, campaign attribution, and growth ledger integrity.

Analytics

The TabOnion website uses Google Analytics 4 to understand aggregate website usage such as page views and install button clicks. The Chrome extension does not load remote Google Analytics scripts.

If product analytics is enabled in the extension, TabOnion may send anonymous feature usage events such as capture_clicked, session_saved, restore_clicked, collection_created, pro_modal_opened, and trial_started. These events use coarse buckets and status labels, not browsing content.

TabOnion does not send saved URLs, page titles, tab contents, Markdown, AI context, prompts, summaries, collection names, session names, cookies, passwords, form input values, or browsing history to Google Analytics.

Information TabOnion does not collect

• Cookies or authentication cookies.
• Passwords, password fields, or form input values.
• Third-party session tokens.
• Full browsing history in the background.
• Saved tab lists for advertising or behavioral profiling.
• Markdown, AI prompts, AI summaries, or page content for analytics.
• Payment card details. Payment processing, if added later, will be handled by a payment provider.

How information is used

TabOnion uses information only to provide or improve user-facing features:

• Save and restore selected browser sessions.
• Organize sessions into collections.
• Export or import user-selected session data.
• Generate user-requested Markdown, summaries, and source maps.
• Verify Pro access, trials, Onion Codes, and referrals.
• Operate encrypted sync if you enable it.
• Improve product reliability through aggregate, privacy-preserving analytics.

Sharing

TabOnion does not sell your data. TabOnion does not use your browser data for personalized, retargeted, or interest-based advertising.

Data may be processed by service providers only as needed to provide TabOnion services, such as hosting, analytics for the website, entitlement verification, email support, or future payment processing. These providers may only process data for the service purpose.

Security

TabOnion uses HTTPS for backend communication. Encrypted sync, when enabled, is designed so synced objects are encrypted before upload. Do not send cookies, passwords, private page content, or exported Markdown to support unless you intentionally choose to share it for troubleshooting.

Retention and deletion

Local session data remains in your browser until you delete it, clear browser storage, uninstall the extension, or use TabOnion's delete and trash controls. Backend entitlement and growth ledger records may be retained as needed for abuse prevention, entitlement verification, accounting, and operational integrity.

For support or deletion requests related to backend records, contact help@tabonion.com.

Chrome Web Store Limited Use disclosure

TabOnion's use of data obtained through Chrome extension permissions is limited to providing or improving TabOnion's single purpose and user-facing features: saving, restoring, organizing, exporting, syncing, and preparing user-selected browser sessions. TabOnion does not use or transfer this data for personalized advertising, retargeting, interest-based advertising, or unrelated profiling.

Changes

TabOnion may update this policy as the product changes. Material changes will be reflected on this page and, when appropriate, in the extension or Chrome Web Store listing.

Contact

Email: help@tabonion.com