Privacy Policy

1. Information We Collect

Account information: when you sign in with Google, we receive and store your email address, name, profile picture, internal user ID, account status, and token information needed to operate login.

Pro and billing information: when you purchase Pro, payment is handled by Polar. We store your plan type, subscription status, billing cycle, current period end, Lifetime flag, payment provider customer ID, and event records sent to us by the payment provider. We do not store full card numbers.

Cloud sync data: if you sign in to Pro and use rule sync, we store your rule data, rule schema version, device ID, client updated time, and server updated time. Rules may include rule names, domains, URL fragments, title fragments, or regular expressions that you enter.

Extension authorization information: to connect the extension to your account, we temporarily store extension sign-in requests, installation IDs, poll token hashes, status, expiration time, approval time, and consumed time.

Website and service usage information: we may collect IP country or region, device type, User-Agent, referrer, UTM parameters, referral information, basic logs, and error information for operations, security, fraud prevention, and product improvement.

Local extension data: TidyTab stores rules, settings, authorization state, stashed windows, and snapshots in your browser. Snapshots may include tab URLs, titles, favicons, pinned state, group names, colors, and collapsed state. Unless a feature clearly offers upload or sync, this local data is not uploaded to our servers. Current Pro rule sync does not upload stash history or window snapshots.

2. How We Use Information

• provide automatic grouping, window stash, restore, command search, account login, and cloud rule sync;
• verify Pro entitlements, process subscription status, show billing management, and prevent payment fraud;
• maintain service security, debug issues, handle support requests, and send necessary service notices;
• understand product usage, improve features, diagnose errors, and measure referral or campaign performance;
• comply with legal obligations, enforce our Terms, and protect the rights and safety of us, users, and the public.

3. How Browser Permissions Are Used

The extension uses "tabs" and "tabGroups" permissions to read current tabs, titles, URLs, groups, and window state, and to group, stash, restore, and search tabs. "storage" saves local settings, rules, authorization state, and snapshots. "contextMenus" lets you create a rule from the current page. "https://tidytab.net/*" is used only to communicate with our API.

We do not sell or share your full browsing history as analytics data. Rule sync uploads the rules you choose to sync, not all of your open tabs or local snapshots.

4. How We Share Information

We do not sell your personal information. We may share necessary information in these situations:

• Google: for sign-in and authentication;
• Polar: for payments, subscriptions, invoices, refunds, and the customer portal;
• Cloudflare or similar infrastructure providers: for API hosting, databases, network security, and logs;
• analytics, advertising, or referral providers: only when enabled in the website configuration, for page analytics, ad display, or campaign measurement;
• legal, compliance, safety, or business transfer situations: when required by law, to protect rights and safety, or as part of a merger, acquisition, or asset transfer.

5. Data Retention

Account and Pro-related information is retained while your account exists and for as long as needed for legal, tax, payment dispute, security, and audit purposes.

Cloud synced rules are retained while you use sync. You may stop syncing, overwrite rules, or contact us to request account and related cloud data deletion.

Local rules, settings, stashed windows, and snapshots are stored in your browser. You can delete them through extension features, browser extension data controls, or by uninstalling the extension. Uninstalling or clearing browser data may delete local data, and we usually cannot restore it.

6. Security

We use access controls, tokens, hashing, HTTPS, third-party payment hosting, and infrastructure security features to protect data. No internet service can be guaranteed 100% secure, so only put information in rule names or conditions that you are comfortable syncing to the cloud.

7. Your Choices and Rights

• you can use free local features without signing in;
• you can choose whether to buy Pro and whether to use cloud rule sync;
• you can delete local data through the browser or extension;
• you can manage subscriptions through your account or the payment portal;
• you can contact us to request access, correction, export, or deletion of personal information we store, subject to your local law.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we collected such information, please contact us.

9. International Processing

We and our providers may process and store information outside your region. By using the Service, you understand that information may be processed in different regions under this Policy.

10. Third-Party Links and Services

The Service may link to the Chrome Web Store, Google, Polar, third-party websites, or pages you open in your browser. These third-party services have their own privacy policies, and we do not control their practices.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through a page update, in-app notice, email, or another reasonable method. The date at the top shows the latest effective date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

hi@tidytab.net