TabFlow ("the extension", "we", "our") is a Chrome browser extension that helps you manage, organize, and search your open tabs. Privacy is a core design principle: all of your browsing data stays on your device. We do not operate a backend server, and we do not collect, sell, or share your personal data.
This policy describes what data TabFlow stores, why, and the narrow circumstances in which data reaches an external server.
All data listed below is stored exclusively in your browser's local storage (IndexedDB and chrome.storage). It is never transmitted to us or any third party, except where explicitly noted.
To power health scores, analytics, and smart grouping, TabFlow stores per-tab records containing: URL, domain, title, first-seen timestamp, last-active timestamp, activation count, total active time, and dead-tab status. Retention: 30 days, then automatically deleted.
When you save a session (manually or via auto-save), TabFlow stores a snapshot: session name, creation timestamp, and an array of tabs with their URL, title, favicon URL, and pinned status. Sessions are kept until you delete them.
To calculate your "Tab Hoarder Score" and top-domain charts, TabFlow records local events such as tab opened, session saved, group created. Each event stores a timestamp, the domain (not the full URL), and the current tab count. No event data is ever sent to an external server. Retention: 90 days, then automatically deleted.
Rules you create (name, trigger, conditions, action) are stored locally and used only to automate tab actions in your browser.
TabFlow records co-occurrence pairs of domains (e.g., "github.com and stackoverflow.com are often open together") to suggest intelligent groups. Only domain names are stored — not URLs or page content.
Your preferences — theme, language, inactive-days threshold, compact mode, accent color, and auto-save toggle — are stored in chrome.storage.local.
If you activate a Pro license, TabFlow stores your license key and the email address associated with your Gumroad purchase in chrome.storage.sync. This allows your Pro status to persist across Chrome sign-in devices. See Section 5 for sync details.
| Data Type | Storage | Retention |
|---|---|---|
| Tab activity | IndexedDB | 30 days (auto-deleted) |
| Analytics events | IndexedDB | 90 days (auto-deleted) |
| Sessions | IndexedDB | Until you delete them |
| Rules | IndexedDB | Until you delete them |
| Domain patterns | IndexedDB | Until you uninstall |
| Settings | chrome.storage.local | Until you uninstall |
| License status | chrome.storage.sync | Until you deactivate |
TabFlow does not:
TabFlow makes exactly three types of external network requests, each described in full below.
When you activate a Pro license — and automatically every 30 days thereafter — TabFlow sends a verification request to Gumroad's API to confirm that your license key is valid.
https://api.gumroad.com/v2/licenses/verifyTabFlow's "dead tab" feature checks every 6 hours whether your open tabs are still reachable. It does this by sending a lightweight HTTP HEAD request directly to each tab's URL — no body, no cookies, no custom headers.
TabFlow loads two typefaces — Inter and JetBrains Mono — from Google Fonts when the popup or side panel opens.
fonts.googleapis.com, fonts.gstatic.com
TabFlow stores your license status in chrome.storage.sync. This means if you are signed into Chrome on multiple devices, your Pro activation status and license key will sync across those devices automatically via Google's Chrome sync infrastructure.
Chrome sync data is encrypted in transit and at rest by Google. TabFlow does not control this sync channel, and we never receive a copy of your synced data. All other TabFlow data (sessions, rules, analytics, settings) is stored in chrome.storage.local or IndexedDB and does not sync across devices.
| Permission | Why it's needed |
|---|---|
tabs |
Read the URL, title, favicon, and active/inactive status of open tabs — required for every core feature (search, grouping, health score, session save). |
tabGroups |
Create, update, and read Chrome tab groups for the grouping and archiving features. |
storage |
Persist your settings, license status, and (via IndexedDB) sessions, rules, and analytics locally. |
alarms |
Schedule background tasks: dead-tab scanning (every 6 hours), data cleanup (daily), and license re-verification (every 30 days). |
sidePanel |
Open the TabFlow dashboard as a Chrome side panel. |
contextMenus |
Add right-click context menu items ("Group domain", "Save session to TabFlow"). |
windows |
Restore saved sessions into the correct browser windows. |
Because all data is stored locally on your device, you have full control:
We do not hold any copy of your data on external servers, so there is nothing to request or erase from our end.
TabFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has used this extension and provided personal data (e.g., a license key tied to a child's email), please contact us so we can take appropriate action.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of TabFlow after changes are posted constitutes your acceptance of the revised policy. For significant changes, we will note them in the extension's release notes.
If you have questions or concerns about this Privacy Policy or how TabFlow handles your data, please reach out: