1. Scope
TabTonic is operated by Unbound Innovations LLC. This Privacy Policy applies to the TabTonic browser extension, the public TabTonic website, account services, optional paid cloud sync, billing support, and reliability diagnostics.
TabTonic is local first. Core workspace features work without an account and do not require cloud sync.
2. Public website
The public website is a static product and help site. It does not provide account sign-in, set marketing cookies, process checkout, or receive workspace content. Install destinations are selected from the visitor's browser type without creating a user profile.
The interactive product demo uses synthetic data in the browser. It does not connect to browser-extension data, Supabase, Polar, or a real TabTonic account.
Vercel hosts and delivers this website. Hosting involves connection information such as visitor IP addresses and system information; Vercel may derive approximate location from IP addresses. This is separate from extension data. The website's application analytics adapter is disabled.
3. Information we collect
3.1 Account information
If you create an account inside the extension, we process the email address, Supabase user identifier, authentication session, and account-security metadata needed for authentication and account management.
Supabase retains sign-in IP addresses in authentication sessions. Authentication audit records and external provider logs are separate from session storage. Disabling database audit-log storage does not disable external logs. TabTonic does not read sign-in IPs to provide workspace features and does not request precise location. This does not mean providers do not process or retain IP addresses.
Supabase uses Resend to deliver account-confirmation and password-reset emails. Resend processes the recipient email address, message content, one-time confirmation or recovery codes, and delivery information. You enter these codes inside TabTonic. These emails do not contain saved workspace content.
3.2 Workspace and tab data
The extension stores local workspace information such as:
- Workspace names, notes, folders, and structure
- Tab URLs, titles, and favicons
- Tab-group membership, names, colors, order, and collapsed state
- Tab order, pinned state, locked state, and open-window state
- Local recovery backups and timestamps
Workspace content is stored in the browser profile for signed-out and Free users. For an eligible Pro, trialing, or payment-grace account, the extension also sends the workspace data needed for cloud sync to Supabase. Signed-out, Free, expired, and revoked accounts do not receive cloud-workspace access.
Local storage is not a promise of no network communication. Loading saved favicons can make resource requests to their hosts. Restoring tabs loads the saved websites in your browser. Those hosts receive connection information, including IP addresses, under their own policies. Browser host permissions govern privileged access, not every network request.
3.3 Billing and subscription information
Polar processes checkout and paid subscriptions as merchant of record. To create checkout and portal sessions and reconcile subscriptions, our backend may temporarily receive Polar customer and subscription responses containing billing details beyond the fields needed for access. These details are not stored as a copy of the Polar response. We persist customer and subscription identifiers, status, period, entitlement cutoff, and ordering/verification metadata needed to enforce access and process account deletion. The extension receives entitlement status, timing, and whether a billing account exists, not Polar customer or subscription identifiers or a payment-card record.
Payment-card details are entered with Polar and its payment partners. TabTonic does not store full payment-card details.
3.4 Technical and diagnostic information
TabTonic sends automatic technical error reports to Sentry, separately from optional cloud sync, including for signed-out and Free users. Reports are limited to fixed technical error codes, standard error types, severity, extension version, runtime surface, build environment, event time, a per-report identifier, and packaged-code stack positions and source-map references used to locate a failure.
Reports contain no workspace or folder names, tab titles, browsing URLs, notes, credentials, raw error messages, arbitrary metadata, or payment details, and no raw or hashed user, device, or workspace identifiers. The extension does not send interaction breadcrumbs, usage sessions, replay, tracing, profiling, logs, or metrics to Sentry. Errors are grouped by technical failure information, not by a person or workspace.
The extension explicitly suppresses IP enrichment in error reports. Sentry still receives the network connection needed to deliver a report; this does not eliminate provider infrastructure logs or other provider-level IP processing.
4. How we use information
We use information only as needed to:
- Provide local workspace, import, export, and recovery features
- Authenticate users and protect accounts
- Synchronize eligible workspaces across devices
- Create Polar checkout and customer-portal sessions
- Reconcile and enforce subscription entitlements
- Diagnose failures and protect service reliability
- Process account-deletion requests
- Meet legal, security, fraud-prevention, and accounting obligations
Depending on location and context, the legal bases may include performance of a contract, legitimate interests in security and reliability, consent where required, and compliance with legal obligations.
5. Providers and sharing
We share information only as needed to operate TabTonic. We do not sell personal data.
- Supabase for Authentication and account security, including sign-in IP handling, account management, and cloud sync for eligible Pro accounts. Provider privacy policy
- Resend for Delivery of account-confirmation and password-reset emails sent by Supabase, including recipient addresses, one-time verification codes, message content, and delivery records. Provider privacy policy
- Polar for Checkout, subscription management, and payment processing as merchant of record. TabTonic uses customer-state responses to maintain subscription entitlements. Provider privacy policy
- Sentry for Automatic error-only diagnostics from the extension, limited to technical error information without workspace content or account identifiers. Provider privacy policy
- Vercel for Website hosting and delivery, including visitor connection and security information. This is separate from extension services; website application analytics is disabled. Provider privacy policy
We may also disclose information when required by law, to investigate abuse or security incidents, to protect rights and safety, or as part of a business transfer subject to applicable safeguards. A transfer of extension user data in a merger, acquisition, or asset sale requires explicit prior consent.
TabTonic's use of information received from Google APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Our use and sharing of extension user data is limited to the disclosed workspace purpose and related operation, security, and reliability needs, subject to the Limited Use restrictions. We do not use it for advertising, data resale, or lending decisions.
6. Retention and deletion
Local workspaces and recovery backups remain in the browser profile until you remove them, remove the extension or profile, or the browser clears extension storage. Recovery backups are normally kept for the last 10 days, with at most one backup per workspace per local calendar day.
Cloud workspace data is retained while the TabTonic account exists, including while a subscription is paused, past due, canceled, or expired, so it can resume after a valid resubscription.
When you delete the TabTonic account inside the extension:
- TabTonic first asks Polar to anonymize or delete the customer so future billing stops.
- After Polar succeeds or reports the customer already deleted, TabTonic deletes Supabase Auth and the database cascade removes the subscription and cloud workspace data.
- If Polar fails, the Supabase account remains intact so deletion can be retried. If Supabase cleanup fails after Polar succeeds, billing has stopped and cloud cleanup can be retried.
Account deletion does not erase local browser storage and does not automatically create a refund.
Sentry diagnostic retention is separate from workspace retention. Error reports are retained under the project's applicable Sentry retention settings and service terms, not the local 10-day recovery schedule. Reports do not carry account identifiers, so deleting an account does not identify and delete its past diagnostic reports. Changes to new error reports do not retroactively remove older reports.
Resend's published standard retention for email and log data is 30 days. This is separate from workspace retention. Deleting a TabTonic account does not automatically erase provider email records. Backups and other provider records remain subject to Resend's applicable policies and legal obligations.
Provider-retained records are separate: Supabase authentication and security records, Polar billing and legally required financial records, Resend email-delivery records, Sentry infrastructure logs, and Vercel hosting records follow their applicable controls, policies, and legal obligations. We do not promise that account deletion or clearing diagnostic history erases these records, or apply an unverified retention period to them.
7. Security
TabTonic uses local-first storage, authenticated cloud operations, row-level ownership checks, paid-access enforcement, restricted database grants, webhook signature verification, source-time ordering, and diagnostic privacy filtering. No method of storage or transmission is completely secure.
8. International transfers
Service providers may process information in countries other than yours. Where required, we and our providers use safeguards for cross-border transfers.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, and to withdraw consent where processing relies on consent.
To make a request, email support@tabtonic.app. We may need to verify the request and may retain information where applicable law permits or requires it.
10. Children
TabTonic is not directed to children under 13 or the minimum age required by local law. We do not knowingly collect their personal information. Contact us if you believe a child provided information to TabTonic.
11. Changes to this policy
We may update this Privacy Policy when the product, providers, or legal requirements change. We will update the date above and take additional notice steps where required by law.
12. Contact
Service: TabTonic
Operator: Unbound Innovations LLC
Privacy and support: support@tabtonic.app