Privacy Policy — Tab Session Vault

Privacy Policy — Tab Session Vault

Last updated: 4 September 2026

Tab Session Vault is a Chrome extension that saves named browser workspaces (open tabs and tab groups) on the device that runs it. This policy describes what the extension can access and what it does not do.

What we collect

The extension stores, in chrome.storage.local on this browser profile only:

• Workspace names you type
• Tab URLs, titles, pin/mute/active state, and favicon URLs from windows you choose to save
• Tab group titles, colors, and collapsed state
• Settings (for example, restore into a new window vs. the current window)
• A local plan flag (free or pro) used to enforce the workspace cap

No account is required for the free plan. We do not operate a telemetry pipeline in this MVP.

Permissions (and why)

| Permission | Why |
| `storage` | Persist workspaces and settings on this device |
| `tabs` | Read URLs/titles of open tabs when you save; create tabs when you restore |
| `tabGroups` | Read and recreate Chrome tab groups |

There is no content script, no <all_urls> host permission, and no access to page HTML, cookies, or form fields.

Internal Chrome pages (chrome://, the Web Store, New Tab, and similar) are not restorable and are dropped on save.

What we do not do

• We do not upload browsing history to a server in this product slice
• We do not sell data
• We do not inject UI into websites
• We do not run analytics SDKs in the extension
• Cloud sync is not enabled. The settings page shows a disabled stub so the contract stays local-first until an opt-in, encrypted sync ships

Payments

Pro checkout is handled by Stripe when VITE_STRIPE_CHECKOUT_URL (or equivalent Checkout Session) is configured on the marketing site. Card data is entered on Stripe, not in the extension. Until those environment variables are set, the checkout page is a non-charging placeholder.

Sharing

Workspace data stays on the device unless you export a JSON file (Pro) or a future opt-in sync is enabled. Exports are files you control.

Retention and deletion

Delete a workspace in the popup to remove it from chrome.storage.local. Uninstalling the extension removes stored data for that profile.

Children

This product is for working professionals. It is not directed at children.

Changes

Material changes to this policy will be reflected in this file and in the version notes of a future Chrome Web Store listing. This repository is the source of truth until a public URL is attached to the listing.

Contact

For privacy questions, contact the publisher listed on the Chrome Web Store listing once published. Until then, open an issue in this repository.