Privacy

The short version

TabGod has no server that holds your tabs. Your URLs, page titles, page content, and activity signals are never sent to us, because there is nothing on our side to receive them. Everything the extension does with your tabs happens inside your browser.

Three things can leave your machine, each only because you asked for it, and each described below: an optional purchase, optional browser-native sync, and a problem report you choose to send.

What we receive

These three paragraphs are the audited wording used in every store listing and support reply. They are reproduced here word for word.

Tabgod has no tab-data backend and never receives URLs, titles, page content, or activity signals. It contacts the accountless licensing service only after the user chooses Buy, to open Stripe Managed Payments Checkout, claim the signed licence once, or request email redelivery. It contacts Launchkit's report service only after the user previews a problem report and chooses Send, or asks to delete one. Optional browser-native sync uses the browser vendor's service and privacy terms; licence sync is a separate, default-off bearer-credential choice.

Tabgod ships no telemetry SDK. We use aggregate statistics and crash information supplied by browser stores, and problem reports a user previews and chooses to send.

The embedding model is bundled with the extension. No tab data, browsed URLs, or page titles are transmitted. The model is downloaded once at install time as part of the extension package.

What stays in your browser

Open tabs, the archive of closed tabs, group names and membership, the activity timeline, the focus trail, your settings, and bounded public-window group plans used by workspace restore stay in your browser. The vectors the bundled model computes to group tabs by meaning stay there too. All of it lives in your browser's own extension storage, and all of it is removed when you uninstall the extension.

Private and incognito tabs are excluded at the point data would be written. Their URLs and titles never enter the archive, workspace plans, embeddings, activity history, or an export file.

Export files are yours. They contain URLs and titles, which is the point of them, and the extension warns you before writing one.

Optional browser-native sync

If you turn on sync, your browser carries the data between your own signed-in browsers using the vendor's sync service (Google's or Mozilla's) under that vendor's terms and privacy policy. It does not pass through us, and we cannot read it.

TabGod for Safari has no sync: Safari keeps extension storage on the Mac, so its settings and archive stay there.

Settings sync carries your preferences. Archive sync additionally carries your archived tab records, which include URLs and page titles. It is off by default and is a separate switch, so turning on sync does not turn it on for you.

Licence sync is a third, separate, default-off switch. A licence is a bearer credential, so it is kept out of the ordinary sync payload unless you explicitly choose otherwise.

If you buy a licence

TabGod for Safari, from the Mac App Store, is free: it has no Buy button and no licence, and it never contacts the licensing service. This section applies to the other browsers.

Nothing is sent anywhere until you choose Buy. From then, the accountless licensing service is contacted to open Stripe Managed Payments Checkout, to claim the signed licence once, and to send it again by email if you ask.

That service holds the minimum needed to fulfil and re-deliver a purchase: the purchase identity, the claim, delivery state, and licence metadata. It never holds URLs, page titles, page content, archives, activity, or semantic data. Payment details go to Stripe and are never seen by us.

At checkout Stripe presents itself as Link, which charges you and is the merchant of record. You accept Link's own terms and privacy policy at the moment you pay, and what Link collects to take the payment is governed by those, not by this policy. Your card statement will show BINARYBUSINESS.ME.

Your email address is used to deliver the licence and to let you recover it later. Ask at support@binarybusiness.me and we will tell you what is held against your purchase, correct it, or delete it, bearing in mind that deleting the record ends our ability to re-deliver your licence.

If you send a problem report

In every browser TabGod supports, Safari included, the Report a problem page prepares a technical report about a failure in TabGod's own code. Nothing is sent until you preview the exact report and choose Send. The first time, your browser asks you to allow TabGod to contact reports.binarybusiness.me, and Firefox also asks for its technical data consent. You can save a copy of the report instead, which sends nothing.

A report holds an error code, positions in TabGod's own code, the TabGod build and your browser's major version. It never includes tab titles, addresses, group names, sessions, your licence or anything you type.

Our report service keeps a sent report for 14 days, and for up to 28 days including backups, separately from the licensing service. Only the people we authorize to fix faults can read it. Your browser keeps a receipt for 28 days, so you can delete the report from the Report a problem page; Forget receipt removes the receipt and leaves the report to expire.

The report service does not keep your IP address or your browser's user agent. The address is used only in memory, to limit how many reports one sender can send in a minute, and neither is written to a report, a log or a backup.

If you report a problem with this website

Every page of this website has a Report a problem control in its footer. It prepares a technical report about a failure in this website's own script and shows you the exact report first. Nothing is sent until you choose Send. Opening the report, saving a copy or cancelling sends nothing.

A report holds an error code, positions in this website's own script, the website's build and your browser's major version, and a note or contact email only if you type one. It never includes page content, form fields, licence keys, Stripe identifiers, web addresses or their query strings.

Send delivers the report to Binary Business's report service through this website's own address, /api/error-reports. The service keeps a report's technical data for 14 days, and for up to 28 days including backups. A note or contact email is kept for 7 days, and for up to 21 days including backups. Only the people we authorize to fix faults can read a report.

Your browser keeps a receipt for a sent report for up to 28 days. Delete this report uses it to delete the report from the service; Forget this receipt removes only the receipt and leaves the report to expire.

No tracking

No analytics SDK, no automatic crash reporting, no advertising identifiers, no cookies set by us, and no page content read from the sites you visit. Site icons come from your browser's own local icon store, so displaying one sends no request.

What we do see is what the browser stores show every developer: aggregate install and usage counts, and crash information, none of which identifies you to us. Beyond that, we see only the problem reports you choose to send.

Who to contact

The data controller is Binary Business, CVR 38836234, VAT DK38836234, Denmark, at support@binarybusiness.me.

If you are in the EU or the UK you may complain to your national data protection authority. In Denmark that is Datatilsynet.

Changes

Each extension update shows a one-time panel describing what changed about data handling, so a change reaches you in the browser rather than only on this page.