Privacy Policy

Last updated: August 25, 2026

TabRabbit ("we", "our", or "the extension") is a browser extension that lets you save, organize, and restore browser tabs. This policy explains what data we collect and how we use it.

1. What We Collect

When you use TabRabbit without signing in, no data leaves your device. Everything is stored locally in your browser.

When you sign in to enable cloud sync, we collect:

• Email address — used for authentication (OTP sign-in) via Supabase. We do not send marketing emails.
• Saved tab data (page titles and URLs of tabs you explicitly choose to save, plus notes, tags, folder names, and research insights you add or generate) — stored encrypted on our servers to enable cross-device sync and the features you request.
• Device identifier — a randomly generated ID stored locally, used to associate your synced data with your devices.

2. Encryption

When cloud sync is enabled, saved tab data is encrypted before storage using AES-256-GCM. Encryption keys are derived per user. Local-only users keep their data entirely on their device.

3. What We Do Not Collect

• We do not collect browsing history beyond the tabs you explicitly save.
• We do not track clicks, mouse movements, or any usage analytics.
• We do not collect payment information (payments are handled by Creem).
• We do not sell or share your data with third parties.

4. Third-Party Services

• Supabase — authentication and encrypted data storage. Supabase Privacy Policy.
• Creem — payment processing for Pro subscriptions. We never see your payment details. Creem Privacy Policy.
• Anthropic — AI categorization and Smart Search (Pro features only, opt-in). Saved tab titles and URLs are sent to Anthropic solely to organize or search your tabs. Anthropic Privacy Policy.
• OpenAI and other connected clients — when you deliberately connect TabRabbit as a ChatGPT, Codex, or compatible MCP plugin and make a request, TabRabbit returns only the synced tabs, folders, notes, tags, and research insights needed for that request to the connected client. TabRabbit's MCP tools are read-only. OpenAI processes data received by ChatGPT and Codex under its own Privacy Policy and the settings of your OpenAI account or workspace.

5. Connected AI Clients and OAuth

Connecting TabRabbit to ChatGPT, Codex, or another compatible client requires you to sign in and approve read-only access. The connected client receives an access token; TabRabbit validates that token and limits every request to the account that approved it. The authorization page keeps its temporary sign-in token only in the browser tab's session storage and clears it when authorization finishes or the tab closes.

You can disconnect TabRabbit from the connected client's app or plugin settings. Disconnecting stops future access but does not control copies already included in conversations or retained by that client under its own policies.

6. Browser Permissions

TabRabbit requests certain browser permissions to function. Here is what each permission does:

• Tabs — read your open tab titles and URLs so we can save and organize them.
• Storage — save your tab groups, settings, and preferences locally.
• Alarms — schedule snoozed tab wake-up reminders.
• Notifications — alert you when a snoozed tab is ready to open.
• Clipboard Write — copy tab lists to your clipboard when you use the copy feature.
• Scripting and Active Tab — read page metadata from the active tab only when you use features that need it, such as smarter categorization or memory insights.
• Context Menus — add "Snooze tab" to your right-click menu.

Optional permission: When you enable smarter categorization, page descriptions, or memory insights, Chrome may ask to "Read data on websites you visit." This allows TabRabbit to read page descriptions and measure tab memory usage. We only read this information — we never modify any website. You can deny this permission and TabRabbit will still work; AI categorization and memory insights will simply use less information.

7. Data Retention & Deletion

Local data remains in your browser profile until you delete it, clear extension storage, or uninstall TabRabbit. Cloud account data remains while your account is active and is removed from live service storage when you delete your account from Settings. Service-provider backups expire according to the providers' backup-retention schedules.

TabRabbit does not store the content of MCP responses in a separate analytics database. Server logs record the tool name, outcome, and request duration for reliability and security, but not the search query, saved-tab content, access token, or account identifier. Connected clients may retain conversation content under their own policies and account settings.

8. Children's Privacy

TabRabbit is not directed at children under 13 and we do not knowingly collect data from children.

9. Changes to This Policy

If we make material changes to this policy, we will update the date above. Continued use of the extension after changes constitutes acceptance.

10. Contact

Questions about this policy? Contact us at support@tabrabbit.app.