Tab Vault — Privacy Policy

Last updated: 2026-09-09

Tab Vault is a browser extension that saves groups of open tabs ("sessions") so you can search, tag and reopen them, and optionally sync them across your devices through a self-hosted backend.

What is stored on your device

By default everything stays in your browser's local storage (IndexedDB): the tab URLs and titles you save, their favicons, your tags, session titles, version-history snapshots and local safety backups. Nothing leaves your device unless you enable sync.

What is sent when you enable sync

• Account: the email address and password you enter are sent to the backend URL you configure, over HTTPS, to create or authenticate your account. Passwords are stored only as a salted hash.
• Session data: session titles, tags, and the saved tab URLs/titles are uploaded so other devices signed in to the same account can retrieve them.
• Optional end-to-end encryption: if you set an encryption passphrase, session titles, tags and tabs are encrypted with AES-GCM in your browser before upload. The passphrase and encryption key never leave your device, and the server stores only ciphertext. Timestamps and the deleted flag are not encrypted, as they are needed to merge changes.

Who runs the backend

The sync backend is operated by the person who deploys it (by default the extension author, at https://lemonyapps.com/tabmanager/api). You may point the extension at your own server instead. Data is stored in that server's database and is not shared with any third party, not used for advertising, and never sold.

Data retention and deletion

Deleted sessions are kept in a local Trash for 30 days, then purged. Removing the extension deletes all local data. To delete server-side data, sign in and delete your sessions (the deletions propagate as tombstones), or ask the backend operator to remove your account.

Permissions

• tabs — read the URL and title of your open tabs so they can be saved.
• storage, unlimitedStorage — keep sessions, history and backups locally.
• alarms — schedule periodic sync, trash cleanup and daily backup.
• contextMenus — add "save this window / tab" entries to the right-click menu.
• sessions — list tabs open on your other devices synced through Chrome, so you can save or reopen them on this computer.

Tab Vault contains no analytics or tracking code and loads no remote scripts.

Contact

Questions: firmalemony@gmail.com