Tabvora Privacy Policy

Effective Date: July 23, 2026 • Version 1.0.0

Summary: Tabvora operates on a local-first design. All user-generated content, shortcuts, notes, settings, and optional feature data remain stored locally on your device. Tabvora does not transmit personal user data to external servers or remote telemetry endpoints.

1. Introduction & Core Principles

Tabvora is a local-first browser extension created for shortcut organization, custom workspaces, productivity tools, and browser navigation. We believe personal browsing data, shortcuts, scratchpad notes, and local configurations belong entirely under user control.

2. What Data Is Stored Locally

Tabvora relies on browser-native local storage APIs (specifically chrome.storage.local and IndexedDB) to preserve dashboard data across browser sessions:

  • •Shortcuts & Workspaces: Saved custom links, titles, custom workspace categories, colors, and layout order.
  • •Quick Notes: Scratchpad text stored inside the local note widget.
  • •Settings & Appearance: Selected themes, card sizing, grid gap density, corner radius, background options, and default search choices.
  • •Archive Data: Items manually archived from the primary shortcut grid.

3. Optional Privacy-Sensitive Features

To ensure absolute user choice, privacy-sensitive functionality is controlled via toggles inside extension settings and disabled by default where applicable:

  • •Draft Recovery (Default OFF): Temporarily records unsaved text field inputs across tabs to prevent data loss from accidental closes. Snapshots remain stored locally inside IndexedDB and can be wiped or disabled at any time.
  • •Website Usage Statistics (Default OFF): Records domain visit frequency and duration to render local statistics charts. Data is calculated and retained strictly inside local browser storage.

4. What We Do NOT Collect

Tabvora enforces strict technical parameters. We do not collect, transmit, or record any of the following items:

  • • Passwords, PINs, or OTP authentication tokens.
  • • Credit/debit card numbers, CVV codes, or financial inputs.
  • • Personal identity documents or biometric information.
  • • Advertising identifiers, tracking cookies, or user fingerprinting parameters.
  • • Remote logs, background telemetry, or cloud copies of browsing data.

5. Security & Sensitive Field Exclusion

When optional Draft Recovery is enabled, Tabvora screens active form inputs. Password inputs (type="password"), payment forms, credit card fields, hidden security tokens, and authentication paths are automatically excluded from local draft snapshots.

6. Browser Permissions Declared

Tabvora requests only the permissions listed in its manifest.json that are directly needed for implemented functionality. No permission is requested "for future use":

  • •storage: Saves shortcuts, workspaces, notes, archived items, and user preferences to chrome.storage.local on this device only.
  • •tabs: Reads the active tab so Tabvora can open shortcuts, determine which page is currently focused for the optional Website Usage Statistics feature, and support in-dashboard navigation. Page content is never read through this permission.
  • •bookmarks: Reads your bookmarks only when you manually click "Import Bookmarks" to populate the shortcut grid. Never accessed automatically or in the background.
  • •contextMenus: Adds right-click ("Add to Tabvora") menu options in the browser for saving shortcuts.
  • •alarms: Used to schedule periodic local maintenance tasks, including recovery for optional Website Usage Statistics after service worker suspension and other background tasks required for extension functionality.
  • •favicon: Uses Chrome's built-in favicon API to display each shortcut's site icon locally, without contacting third-party favicon services.
  • •host_permissions (http://*/*, https://*/*): Required only for the optional, default-OFF features — Draft Recovery (recovering unsaved form text after an accidental tab close) and Website Usage Statistics (local time-on-site charts). Also used to verify whether a saved shortcut's URL is still reachable. These permissions are never used to read, log, or transmit page content to any server; everything they touch stays in local storage.

6a. Chrome Web Store Compliance

Tabvora's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements:

  • •Data accessed through granted permissions is used only to provide and improve Tabvora's user-facing features described in this policy.
  • •Tabvora does not sell or transfer user data to third parties.
  • •Tabvora does not use or transfer user data for advertising, and does not use it for purposes unrelated to Tabvora's single purpose (a new-tab shortcut and workspace dashboard).
  • •Tabvora does not use or transfer user data to determine creditworthiness or for lending purposes.
  • •No humans read user data unless required for security purposes (e.g., investigating abuse), with the user's consent, or to comply with applicable law.

7. Network Usage

Tabvora does not upload user data to external servers. Internet traffic occurs strictly through standard browser navigation when you intentionally:

  • • Click a saved shortcut link to navigate to a website.
  • • Click links to open the Official Website, GitHub Repository, Report an Issue, Privacy Policy, or Rate Extension pages.

Some optional features, such as checking whether a saved shortcut is still reachable, may send a direct request to the selected website itself. Tabvora does not operate any backend servers. These requests are sent directly from your browser to the selected website and are not routed through or stored by Tabvora.

8. Data Retention & User Control

Users retain full administrative control over stored local data. Through Extension Settings, users can:

  • • Enable or disable optional features (Draft Recovery and Usage Statistics) at any time.
  • • Clear saved Draft Recovery records or clear Usage Statistics logs instantly.
  • • Individual shortcuts, notes, and archived items can be deleted at any time.
  • • Perform a complete Factory Reset to clear all local Tabvora storage.
  • • Draft Recovery automatically purges local records according to the retention period selected by the user.

9. Open Source Transparency

Tabvora is an open-source project. Users, developers, and security reviewers are invited to review the source code on our official GitHub repository to inspect our local storage practices and Manifest V3 implementation.

10. Core Privacy Guarantees

Local First
100% device-level data retention
Zero Tracking
No background telemetry scripts
User Controlled
Optional features remain Default OFF
Manifest V3
Built using secure extension standards

11. Updates to This Policy

If changes are made to this Privacy Policy to reflect future extension updates, the Effective Date at the top of this document will be updated. All revisions will strictly maintain our local-first data architecture.

12. Resources & Contact

For questions, bug reports, or code review, visit our official links: