Complete, transparent disclosure of every Manifest V3 permission requested by Tabvora in the Chrome Web Store.
storage
Required
Why required: Used to write your saved shortcuts, workspace categories, quick notes, Pomodoro timer state, and user preferences directly to chrome.storage.local on your device.
What is NOT collected: Storage is completely isolated inside your local browser profile and is never synced or uploaded to cloud servers.
favicon
Required
Why required: Uses Chrome's built-in native favicon service (chrome://favicon2/) to render crisp site icons on your shortcut cards without making requests to third-party icon APIs.
tabs
Required
Why required: Necessary to open shortcuts, identify active website origins for optional local usage stats and limits, support in-dashboard navigation, and sleep inactive background tabs via chrome.tabs.discard when using the RAM Saver memory optimizer (with pinned tabs and audible media safeguarded).
What is NOT collected: Page content, input history, passwords, or personal credentials are never read or accessed through this permission.
bookmarks
Manual Action Only
Why required: Allows you to manually click "Import Bookmarks" inside extension settings to populate your shortcut dashboard.
What is NOT collected: Bookmarks are never read automatically or in the background. Imported items stay strictly on your local device.
contextMenus
Required
Why required: Adds standard right-click context menu options ("Add to Tabvora") so you can quickly save web pages or links to your workspace dial.
alarms
Required
Why required: Used for scheduled local periodic tasks such as event-driven usage recording, Pomodoro countdown intervals, Digital Wellbeing reminders, and midnight reset checks.
search
Required
Why required: Powers web search execution from the dashboard search bar directly using your browser's configured default search engine.
clipboardRead
Manual Action Only
Why required: Powers the single-click "Paste" button inside the Quick Notes scratchpad widget so you can quickly paste text snippets into your notes.
What is NOT collected: Clipboard data is only accessed when you explicitly click the Paste button. It is never read automatically or in the background.
notifications
Optional Features Only
Why required: Delivers local desktop notifications when a Pomodoro timer session finishes or when user-configured website usage limits are reached.
content_scripts (http/https)
Optional Features Only
Why required: Scoped strictly to top-level pages (all_frames: false) and activated only when optional user-enabled features are turned on in Settings (such as local Draft Recovery or Browsing Limits overlay). Tabvora does not declare broad host_permissions in its manifest.
What is NOT collected: Draft Recovery automatically excludes password inputs, payment fields, CVVs, tokens, authentication forms, and phone numbers. Browsing data is never transmitted to any external server.