Privacy Policy
Effective July 15, 2026
The short version
TabBurrow is local-first: your tabs, collections, and sessions are stored on your device by default, and TabBurrow works fully offline with no account. If you choose to sign in, your collections and links sync to our database so you can reach them from another device. We never send full page content anywhere, we don't run ads, and we don't sell your data.
What's stored locally
Without signing in, TabBurrow stores everything in your browser's IndexedDB: your collections, the links inside them (URL, title, favicon, note, tags), and session snapshots of your open windows. This data never leaves your device.
What syncs if you sign in
Signing in (Google OAuth or an email magic link, via Supabase Auth) enables PRO cloud sync. Your collections and links, the same fields stored locally, sync to our Supabase Postgres database over an encrypted connection so they follow you across devices. Session snapshots are device-specific by design and are never synced. Your account also stores your email address and subscription status.
What AI organize sends
On a capable desktop Chrome, AI organize runs on-device with Chrome's built-in Gemini Nano, so nothing about your links leaves your browser at all. When the on-device model is not available, or a folder is too large for it, the cloud path sends only the titles and URLs of the links in that collection to Claude (Anthropic) through our server-side function, never the content of the pages themselves. Either way, suggested groupings and tags are shown to you as a preview; nothing is applied until you confirm it.
Payments
PRO subscriptions are billed through Stripe. Stripe collects and stores your card details directly; TabBurrow never sees or stores your full card number. We store your subscription status and Stripe customer/subscription IDs so we know your account is entitled to PRO features.
No ads, no data sales
TabBurrow does not run advertising, does not use advertising trackers, and does not sell or rent your data to anyone. This website does not currently use third-party analytics or tracking pixels.
If you self-host
Self-hosted instances run on your own Supabase project and your own Anthropic API key. In that setup, you are the data controller: your data goes to your infrastructure and your Anthropic account, not ours, and this policy describes our hosted service, not your self-hosted one.
Data retention & deletion
You can delete a collection, delete your local data, or export everything to JSON at any time from the dashboard. Deleting your account removes your synced collections and links from our database; local data on each device is cleared separately by clearing extension storage or uninstalling the extension.
Open source
TabBurrow's source, including the sync code and both the on-device and cloud AI organize code, is AGPL-3.0 licensed and publicly auditable, so you can verify these claims against the actual code rather than take our word for it.
Children
TabBurrow is not directed at children under 13, and we do not knowingly collect data from them.
Changes to this policy
If this policy changes materially, we'll update the effective date above and, for significant changes, note it in the extension.
Contact
Questions about this policy or your data can be sent through the contact details listed on our GitHub repository once it's public, or via an issue on the repository itself.