TabularyPrivacy Policy
Tabulary · Last updated 2026-08-05
Tabulary is a browser extension for saving and organizing open tabs. This page sets out what it handles, where that data goes, and what you can do about it.
The short version
- Everything you save stays on your device by default. No account, no server of ours, no tracking.
- If you sign in with Google, your library and a small profile file are backed up to a hidden folder inside your own Google Drive — never to a database we operate.
- There is no analytics, no advertising, and nothing is sold or shared with anyone.
What Tabulary stores, and where
“Your library” below means everything the extension keeps for you: boards, collections, saved tabs, tags, sessions, review markers, Live Collection rules, desks and their widgets, and your settings.
| Data | Where it lives | Who can see it |
|---|---|---|
| Your library | Your browser’s own storage (IndexedDB) | Only you, on this device |
| Your library, if you sign in with Google | Additionally: a hidden, app-private folder in your own Google Drive (Drive’s appDataFolder) | Only you — invisible in your normal Drive view, unreachable by any other app |
| Display name, profile photo, theme and appearance choices | Local storage, plus the same private Drive folder if signed in with Google | Only you |
| Per-device view state (which workspace you last had open, whether you’ve dismissed the welcome screen) | Local storage only — deliberately never synced | Only you, on this device |
| Account identity (email address, or your Google account) | Firebase Authentication, operated by Google — used only to know who you are | You and Google’s authentication infrastructure. We never see or store your password. |
| A short-lived Google Drive access token | chrome.storage.local on this device, replaced when it expires | Only you |
Sign-in and Google Drive access
Signing in is optional — the extension is fully usable without ever doing it. There are two ways:
- Email and password — creates an account for identity only. Your library stays on the device unless you also connect Google.
- Google sign-in — additionally requests one narrow permission,
drive.appdata. This lets Tabulary read and write only its own hidden folder in your Drive. It cannot see, list, or modify your files, photos, or documents.
You can revoke that access at any time from Google Account → Security → Third-party apps, or delete the stored data directly from Google Drive → Settings → Manage apps → Tabulary → “Delete hidden app data.”
The token service
Keeping Drive backup working without asking you to reconnect requires a Google refresh token, and a refresh token must never ship inside an extension. Tabulary’s is held by a small separate service (a Cloudflare Worker), encrypted, one record per signed-in account. It hands the extension a short-lived access token when a backup is due.
That service never receives your boards, collections, tabs, sessions, rules, or any browsing data. It only knows that an account exists and holds the credential needed to refresh that account’s own Drive access.
What Tabulary does not do
- It does not run a server that stores your tab data.
- It does not use analytics, advertising networks, or tracking pixels.
- It does not sell, rent, or share your data with third parties.
- It does not watch your browsing. It reads a tab’s title and URL when you ask it to save that tab, and site favicons so saved links have an icon.
Browser permissions Tabulary requests
| Permission | Why |
|---|---|
tabs | To read the title and URL of your open tabs when you choose to save them, and to compare a session against what’s already open before restoring it. |
storage, unlimitedStorage | To keep your library on the device without a size cap. |
bookmarks | To read your browser bookmarks when you choose to import them. Nothing is read until you start an import, and nothing is written back to your bookmarks. |
favicon | To show a saved link with its site’s own icon instead of a blank tile. |
identity | To run the Google sign-in flow, if you use it. |
Network access to *.workers.dev | The token service described above. Used only for signed-in Google Drive backup. |
Tabulary also replaces the new tab page and registers tt as an address-bar keyword. Neither sends anything anywhere: the new tab page is the extension’s own library, and an address-bar search is answered from local storage.
The feedback form
Settings → Support links to an optional feedback form hosted on Google Forms. Using it is entirely up to you, it never opens by itself, and it collects only what you type into it. Nothing from your library is attached.
Deleting your data
From Settings → Data you can export everything as a JSON file, clear this device’s data, clear the signed-in account’s data, or delete the account outright. Every destructive action offers to export first, and account deletion tombstones your cloud data before the identity is removed.
Children’s privacy
Tabulary is not directed at children, and we do not knowingly collect data from anyone under 13.
Changes to this policy
If this policy changes, the “Last updated” date above changes with it.
Contact
Questions about any of this: hishamsunjeq123@gmail.com.