Tabspace — Privacy Policy

Last updated: 27 August 2026 Applies to: Tabspace for Chrome, version 1.6.0 and later

The short version. Tabspace keeps your board — spaces, folders, bookmarks, tags and notes — on your own computer. Nothing leaves your device unless you deliberately turn on sync.

There is no analytics, no telemetry, no advertising, and no tracking of any kind. Your data is never sold, rented or shared with anyone, and it is never used for advertising or to train any model.

If you choose to create an account, your board is stored in a private, per-account row on Supabase so it can follow you to your other browsers. You can delete it at any time.

1. Who this policy is from

Tabspace is an independent Chrome extension. This policy describes what the extension does with information on your device and, if you enable sync, on our sync backend. It covers only the Tabspace browser extension — not any website you happen to visit.

2. What information Tabspace handles

Your board content

This is the information you create by using the extension:

Page titles and URLs of the tabs and bookmarks you save
Tags, notes and stickers you write
The names and arrangement of your spaces, folders and groups
Your preferences — theme, layout and other display settings

Tabspace also reads two things from your browser so it can show them to you, and stores neither unless you act:

Your open tabs in the current window, listed in the sidebar so you can drag one onto the board. A tab is only saved when you save it.
Your existing Chrome bookmarks, read when you choose to import them, so they can be shown as an importable tree. Nothing is read from your bookmarks unless you open the import screen.

Tabspace does not read the content of the pages you visit. It has no content scripts and no permission to access any website you browse.

Account information (only if you enable sync)

Sync is off by default. If you turn it on, you create an account with an email address and a password. The email address identifies your account and lets you recover it; the password is handled by our authentication provider and is never visible to, or stored by, the extension in readable form.

Technical information

A random device identifier, generated locally. It exists so a device can recognise and ignore the echo of its own sync push. It is a random string — not tied to you, your hardware, or any advertising identifier.
Remembered sign-in addresses, stored in the extension's own local storage so the sign-in box can suggest the account you use most. This is a list of email addresses and use counts on your machine only. No password, token or session is ever written there.

3. Where your information is stored

Location	What goes there	When
`chrome.storage.local`	Your full board, your settings, and your sync session token if signed in	Always. This copy is authoritative and stays on your device.
`chrome.storage.sync`	A compact copy of your board	Only if you enable browser sync. Chrome carries it through your own Google account; we never see it.
Supabase (our sync backend)	Your board and your account email address	Only if you create a Tabspace account and sign in.

If you never enable sync, no information ever leaves your computer.

4. Browser permissions and why each one is needed

Permission	Why Tabspace asks for it
`storage`	To save your board and settings on your device, and to sync them through Chrome if you enable that.
`unlimitedStorage`	So a large board is never truncated by the default storage cap.
`tabs`	To list the tabs open in the current window so you can drag one onto the board, and to open or focus the board itself.
`bookmarks`	To read your existing Chrome bookmarks when you choose to import them.
`favicon`	To display the site icon next to a saved bookmark, using the icon Chrome has already cached locally.
`sidePanel`	To show the Tabspace side panel.
Host access to our Supabase project	To send and receive your board while you are signed in to sync. This is the only network address the extension is permitted to contact.

5. What Tabspace never does

No analytics, telemetry, usage statistics or crash reporting
No advertising, ad networks or advertising identifiers
No tracking of your browsing history or the pages you visit
No reading of, or injecting into, the websites you open
No selling, renting or sharing of your data with anyone
No use of your data for creditworthiness or lending purposes
No use of your data to train machine learning models
No transfer of your data to anyone other than the sync provider named below, and then only when you have signed in

Tabspace collects and uses your information for one purpose only: providing the single feature described in its store listing — saving and organising your tabs and bookmarks, and optionally syncing them between your own browsers.

6. Third-party service

Tabspace uses Supabase — and only Supabase — to store your board when you are signed in. Supabase acts purely as our hosting and authentication provider; it does not use your board content for its own purposes.

Access is enforced by row-level security in the database: an account can read and write only its own row. Signing in to one account never grants any visibility into another. All traffic is over HTTPS.

Supabase's own handling of data is described in their privacy policy.

7. Keeping and deleting your information

Your board is kept for as long as you keep using Tabspace. You are always in control of removing it:

Remove one item — delete it on the board; the change is pushed away on the next sync.
Stop syncing — sign out. Your board stays on the device you are using.
Delete everything stored remotely — email the address below from your account's email address and we will permanently delete your stored board and your account. Deletion requests are actioned within 30 days.
Remove everything locally — uninstall the extension. Chrome deletes the extension's local and synced storage along with it.

8. Security

All network traffic uses HTTPS. Passwords are hashed by our authentication provider and are never stored by the extension in readable form. Access to stored boards is restricted per account at the database level rather than in the extension, so a bug in the extension cannot expose another person's board. No system is perfectly secure, but the surface here is deliberately small: one backend, no third-party scripts, and no access to the pages you browse.

9. Children

Tabspace is not directed at children under 13, and we do not knowingly collect information from them.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete the information held about you, and to withdraw consent to sync at any time. Because your board lives on your own device and is visible inside the extension, access and correction are immediate. For export or deletion of remotely stored data, use the contact address below.

11. Changes to this policy

If this policy changes in a way that affects how your information is handled, the "Last updated" date at the top will change and the revised policy will be published at this same address before the change takes effect.

12. Contact

Questions, deletion requests, or anything else about privacy in Tabspace:
falconmonks@gmail.com