Privacy by design

Your browser work stays under your control.

TabVault is a local-first tab and session manager. It does not require an account and does not send your saved browsing data to the developer or advertising services.

  • No tracking
  • No analytics
  • No advertising
  • No cloud account
  • No data sale

Effective date: June 20, 2026

Plain-language summary

TabVault processes tab and session information only to provide the features you request. Normal extension data stays in browser-owned local storage. The developer cannot view it.

1. Overview

This Privacy Policy explains how the TabVault browser extension handles information when you save tabs, organize sessions, search bookmarks, recover browser work, or create backups.

Collection Only the browser information required for TabVault features.
Processing Performed locally inside your browser.
Transmission No automatic transmission to the developer or third parties.
Control Delete sessions or all TabVault data from the extension settings.

2. Information TabVault handles

Depending on the features you use, TabVault may process the following information:

Open tabs Tab titles, URLs, window membership, pinned state, and supported tab-group metadata.
Saved workspaces Names, notes, tags, folders, colors, icons, saved links, and workspace preferences you create.
Recovery information Recently closed browser sessions and local snapshots used for recovery features.
Bookmarks Bookmark titles, URLs, and folder structure when you search, import, or export bookmarks.
Security metadata Salted verification hashes for an optional interface password and recovery key. Plain-text interface passwords and recovery keys are not stored.

TabVault does not read webpage bodies, form fields, cookies, messages, financial details, health information, or precise location.

3. Local storage, retention, and deletion

Saved sessions, collections, notes, tags, backups, settings, password-verification metadata, and automatic recovery snapshots are stored in extension-owned browser storage. IndexedDB is the primary local vault.

Information remains on your device until you delete it, uninstall the extension, or clear its browser storage. TabVault provides controls to:

  • Delete individual saved workspaces.
  • Clear saved sessions while retaining available recovery backups.
  • Delete recovery history and backups.
  • Permanently delete all TabVault data and settings.

Exported files are saved wherever you choose and remain under your control after download.

4. Passwords and encryption

Interface password

The optional vault password restricts access to TabVault interfaces. It does not encrypt the normal local IndexedDB database at rest. TabVault stores a salted password-verification hash rather than the plain-text password.

Recovery key

A one-time recovery key can reset the interface password. Only a salted verification hash of this key is retained. TabVault cannot display a lost recovery key again.

Encrypted portable backups

Password-protected backup files are encrypted locally using PBKDF2-SHA256 key derivation and AES-GCM encryption before download. Backup passwords are not stored and cannot be recovered by TabVault.

5. Browser permissions

TabVault requests permissions only for its user-facing session-management features:

Tabs and tab groups Save, search, organize, close, and restore tabs while preserving supported group information.
Storage Keep settings and extension data locally.
Sessions Show and restore recently closed tabs and windows.
Bookmarks Search bookmarks and perform user-requested bookmark import or export actions.
Alarms Schedule local recovery snapshots and snooze reminders.
Side panel Provide the optional compact TabVault side panel.
Favicons Display recognizable website icons beside saved links using the browser's built-in favicon service.

TabVault does not request broad website host permissions.

6. Data sharing and limited use

TabVault does not sell user data or transfer it to data brokers or other third parties. It does not use browser data for advertising, credit decisions, personalized recommendations, or purposes unrelated to its stated tab and session-management functionality.

The extension does not include analytics, tracking, AI services, a cloud account, an external database, or a backend server. The developer and other humans do not have access to data stored locally by TabVault.

Information leaves the extension only when you deliberately create an export or backup file. TabVault does not automatically upload those files.

7. Changes to this policy

This policy may be updated when TabVault's features or legal requirements change. Material changes will be reflected on this page with a revised effective date.

8. Contact

For privacy questions or support, contact the developer through the support channel shown on the TabVault Chrome Web Store listing.