Tabvora Privacy Policy

Effective Date: October 14, 2026 • Version 2.1.0

Summary: Tabvora operates on a local-first design. Tabvora stores locally your shortcuts, workspaces, notes, preferences, optional Draft Recovery data, website usage statistics, browser usage statistics, browser usage limits, and Digital Wellbeing settings. No personal information or user-generated data is transmitted to external servers. All processing is performed locally on your device unless you intentionally visit external websites or use browser navigation.

1. Introduction & Core Principles

Tabvora is a local-first browser extension created for shortcut organization, custom workspaces, productivity tools, and browser navigation. We believe personal browsing data, shortcuts, scratchpad notes, usage stats, and local configurations belong entirely under user control. No user account or sign-in is required to use Tabvora.

2. What Data Is Stored Locally

Tabvora relies on browser-native local storage APIs (specifically chrome.storage.local, chrome.storage.session, and IndexedDB) to preserve dashboard data across browser sessions:

  • Shortcuts & Workspaces: Saved custom links, titles, workspace categories, colors, and layout order (stored in local IndexedDB).
  • Quick Notes: Scratchpad notes and text entered in the dashboard note widget (stored in chrome.storage.local).
  • Timer & Pomodoro State: Timer mode, countdown state, and timestamps (stored in chrome.storage.local).
  • Settings & Appearance: Selected themes, card sizing, grid gap density, corner radius, background options (40 curated wallpapers and live visual effects), widget configurations, and default search engine choice (stored in chrome.storage.local).
  • Archive Data: Items manually archived from the primary shortcut grid (stored in local IndexedDB).
  • Website & Browser Usage Statistics (Optional): When enabled, domain visit frequency, active duration, and user-configured limit thresholds are calculated and stored locally in chrome.storage.local.
  • Draft Snapshots (Optional): When Draft Recovery is enabled, unsaved text from non-sensitive inputs is saved in local IndexedDB to prevent data loss.
  • Digital Wellbeing State: Temporary session-based reminder timestamps stored in chrome.storage.session that automatically reset when the browser restarts.

3. Optional Privacy-Sensitive Features

To ensure absolute user choice, privacy-sensitive functionality is controlled via toggles inside extension settings and disabled by default:

  • Draft Recovery (Default OFF): When explicitly enabled, temporarily captures unsaved text field inputs on top-level pages to prevent data loss from accidental tab closure. Snapshots remain stored strictly inside local IndexedDB. Passwords, payment details, phone numbers, and authentication tokens are excluded. Users can disable the feature or purge all stored drafts at any time through Settings.
  • Website & Browser Usage Statistics (Default OFF): Records domain visit frequency, duration, and overall Chrome browser usage to render local statistics charts and optional dashboard usage cards. Data is calculated and retained strictly inside local browser storage and can be cleared by the user at any time.
  • Global Browser Usage Limit (Default OFF): Allows users to set a total daily browser usage threshold and receive local reminder popups when reached. All checks run locally without external communication.
  • Digital Wellbeing (Default OFF): Provides periodic wellness reminders (Eye, Stretch, Walk, and Long Break Reminders) to encourage healthy computer habits. Reminders run locally, rely solely on session-based timers, reset automatically when Chrome closes, and do not collect or upload health or profiling data. Digital Wellbeing reminders are informational only and are not intended to diagnose, monitor, treat, or provide medical advice.

4. What We Do NOT Collect

Tabvora enforces strict technical parameters. We do not collect, transmit, or record any of the following items:

  • Passwords, PINs, or OTP authentication tokens.
  • Credit/debit card numbers, CVV codes, or financial inputs.
  • Personal identity documents, medical/health data, or biometric information.
  • Advertising identifiers, tracking cookies, or user fingerprinting parameters.
  • Remote logs, background telemetry, or cloud copies of browsing data.

5. Security & Sensitive Field Exclusion

When optional Draft Recovery is enabled, Tabvora enforces multi-layered screening before capturing any draft inputs:

  • Input Types Excluded: Password fields (type="password"), hidden inputs, telephone numbers (type="tel"), file uploads, and button/submit controls are never captured.
  • Sensitive Autocomplete Tokens: Inputs specifying sensitive autocomplete attributes (such as cc-number, cc-exp, cc-csc, one-time-code, current-password, new-password, tel*, bday*, and transaction-*) are completely bypassed.
  • Field Metadata & Keyword Filtering: Inputs whose name, ID, placeholder, class, or aria-label contains sensitive terms (including password, otp, pin, token, secret, cvc, cvv, csc, iban, routing, account, card-number, ssn, taxid, security-code, expiry, auth, passcode, and phone) are filtered out using best-effort multi-layer screening.
  • Form Security Context: Inputs located inside login, authentication, checkout, or payment forms containing password or card fields are excluded.
  • Top-Level Context Only: Draft capture operates strictly in the top-level browsing window (window.top === window.self), ignoring embedded and cross-origin iframes.
  • URL Path & Parameter Handling: Stored draft snapshots record the web page origin and pathname (origin + pathname) to associate draft text with the specific page for restoration. Query strings (such as ?token=..., ?auth=...) and hash fragments (#...) are stripped. URL paths themselves are preserved to distinguish between different pages on the same website.

6. Browser Permissions Declared

Tabvora requests only permissions directly needed for implemented extension functionality:

  • storage: Used to store shortcuts, workspaces, quick notes, Pomodoro timer state, settings, and optional usage statistics locally on this device.
  • favicon: Used to fetch and display domain icon images cleanly via Chrome's native favicon provider (chrome://favicon2/).
  • tabs: Used to manage shortcuts, determine the active tab domain for optional Usage Statistics and limits, support browser navigation, and sleep background tabs via chrome.tabs.discard when the user clicks the RAM Saver memory optimizer (with pinned tabs and audible media safeguarded).
  • bookmarks: Used strictly when the user manually clicks "Import Bookmarks" to populate the shortcut grid. Never accessed automatically or in the background.
  • contextMenus: Used to provide right-click options for saving shortcuts directly to Tabvora.
  • alarms: Used for scheduled local periodic tasks such as event-driven usage recording, Pomodoro countdown intervals, Digital Wellbeing reminders, and midnight reset checks.
  • search: Used to execute search queries entered in the dashboard search bar through the user's preferred search engine.
  • clipboardRead: Used strictly when the user explicitly clicks the "Paste" button in the Quick Notes widget to insert clipboard text into their notes. Clipboard data is never accessed automatically or in the background.
  • notifications: Used to deliver local desktop notifications when a Pomodoro timer session completes or when user-configured website usage limits are reached.

Note: Tabvora does not declare broad host permissions (http://*/* or https://*/*). Content scripts are scoped strictly to top-level pages to support user-enabled features without broad extension host access.

6a. Chrome Web Store Compliance

Tabvora's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements:

  • Data accessed through granted permissions is used only to provide and improve the user-facing features described in this policy.
  • Tabvora does not sell or transfer user data to third parties.
  • Tabvora does not use or transfer user data for advertising, and does not use it for purposes unrelated to its single purpose (a new-tab shortcut, workspace dashboard, and productivity manager).
  • Tabvora does not use or transfer user data to determine creditworthiness or for lending purposes.
  • No humans read user data unless required for security purposes, with the user's consent, or to comply with applicable law.

7. Network Usage

Tabvora operates on a strict zero-telemetry, offline-first model. Tabvora sends no automated or background network requests from any extension features. All features (shortcuts grid, custom workspaces, notes, timers, optional draft recovery, and usage limits) execute entirely on your local device.

Standard internet traffic occurs exclusively through normal browser navigation when you intentionally:

  • Click a saved shortcut link to navigate to a website in a browser tab.
  • Click links to open the Official Website, Official Chrome Web Store page, GitHub Repository, Contact Page, Privacy Policy, or Report an Issue pages.

Note: When performing a search from the dashboard search bar or viewing shortcut icons, Chrome's built-in favicon cache and your designated search engine handle their respective network traffic directly. Tabvora transmits no data to any intermediary server.

8. Data Retention & User Control

Users retain full administrative control over stored local data. Through Extension Settings, users can:

  • Enable or disable optional features (Draft Recovery, Usage Statistics, Global Browser Limits, and Digital Wellbeing) at any time.
  • Clear saved Draft Recovery records or clear Usage Statistics logs instantly with a single click.
  • Individual shortcuts, notes, and archived items can be edited or deleted at any time.
  • Perform a complete Factory Reset to clear all local Tabvora storage.
  • Digital Wellbeing session data resets automatically when Chrome closes or during the daily midnight reset.
  • Uninstalling Tabvora removes extension-managed local data in accordance with Chrome's extension storage behavior.

9. Code Transparency & Supporting Resources

Tabvora is committed to transparency. Complete source files, documentation, and extension assets are provided for community reference, auditability, and independent verification. Complete software license terms and wallpaper attribution catalogues are documented in our repository's LICENSES.md and ATTRIBUTION.md records.

10. Core Privacy Guarantees

No user data is sold, rented, shared, or transferred to third parties for advertising, profiling, or analytics purposes.

Local First
Strict device-level data retention
Zero Tracking
No background telemetry scripts
User Controlled
Optional features remain Default OFF
Manifest V3
Built using secure extension standards
No Cloud Sync
All user data remains on this device unless explicitly exported

11. Updates to This Policy

If changes are made to this Privacy Policy to reflect future extension updates, the Effective Date at the top of this document will be updated. All revisions will strictly maintain our local-first data architecture.

12. Resources & Contact

For questions, bug reports, or support, visit our official links: