Browser Permissions Audit

Why required: Saves your shortcuts, workspaces, notes, archived items, and preferences to chrome.storage.local so your dashboard persists across browser sessions.

What is NOT collected: Storage is isolated inside your own browser profile and is never transmitted to any server or third party.

Why required: Reads the active tab so Tabvora can open shortcuts, determine which page is currently focused for the optional Website Usage Statistics feature, and support in-dashboard navigation.

What is NOT collected: Page contents, keystrokes, form entries, or cookies are never read or accessed through this permission.

Why required: Reads your bookmarks only when you manually click "Import Bookmarks" to fill the shortcut grid.

What is NOT collected: Bookmarks are never read automatically or in the background — only on your explicit action.

Why required: Adds a right-click ("Add to Tabvora") option in Chrome's context menu so you can save the current page as a shortcut.

What is NOT collected: No page data is read — only the URL and title of the page you right-click on.

Why required: Schedules periodic local checks — such as background Draft Recovery snapshots and broken-shortcut detection — without keeping the extension's service worker running continuously.

What is NOT collected: Alarms only trigger local, on-device logic. No data is sent anywhere as a result.

Why required: Uses Chrome's built-in favicon API to display each shortcut's site icon locally.

What is NOT collected: No requests are made to third-party favicon services — icons are resolved by Chrome itself.

Why required: Needed only for optional, default-OFF features: Draft Recovery (recovering unsaved form text after an accidental tab close) and Website Usage Statistics (local time-on-site charts), plus checking whether a saved shortcut's URL is still reachable.

What is NOT collected: Page content accessed under this permission never leaves your device — it is not logged, transmitted, or sent to any Tabvora server.