TabStash AI — Privacy Policy

Last updated: 2026-06-01

TabStash AI ("the extension") is a local-first browser tab and session manager. This policy explains exactly what data the extension handles and where it goes. TabStash AI has no backend server of its own and requires no account.

Summary

• We do not operate any server that receives your data.
• We do not collect, sell, or share your data for advertising.
• Your sessions and tabs are stored locally in your browser.
• Optional cloud sync uses your own browser account (Chrome Sync), not our servers.
• Optional AI features send tab titles and URLs to the AI provider you choose and configure with your own API key — only when you explicitly enable AI and consent to it.

What data the extension handles

Tab and session data (titles, URLs, favicons, tab-group names, your notes/tags).

Stored locally on your device via the browser's `IndexedDB` and `chrome.storage` APIs. This data never leaves your device unless you enable one of the optional features below.

Settings and API keys.

Any AI provider API key you enter is stored locally in `chrome.storage` on your device and is sent only to that provider's API endpoint when you use AI features. We never receive it.

Optional features that transmit data (all off by default / opt-in)

Cross-device sync

If you enable sync, your saved sessions are stored in `chrome.storage.sync`, which is synchronized by your browser through your own Google/Chrome account. This is first-party browser infrastructure; TabStash AI does not see or store this data on any server we control.

AI features (auto-grouping, semantic search, suggestions)

AI features are off by default. When you enable an AI feature and select a cloud provider (OpenRouter, OpenAI, Anthropic Claude, Google Gemini, DeepSeek, Groq, Mistral, or a custom endpoint), the extension sends the titles and URLs of the relevant tabs to that provider's API using your own API key, in order to generate the grouping/search/summary result. You are shown an in-product consent prompt before any tab data is sent to a cloud provider for the first time.

If you instead choose a local provider — Ollama (runs on your own machine) or Chrome built-in AI (on-device) — no tab data leaves your device.

We do not control how third-party AI providers handle data sent with your key; please review your chosen provider's privacy policy.

Data we do NOT collect

• No analytics, telemetry, or usage tracking.
• No advertising identifiers.
• No personal information beyond what is described above.
• No remote code is loaded or executed; the extension ships all its code in the package.

Permissions and why they are used

• `tabs`, `tabGroups` — read/restore your open tabs and tab groups (the core feature).
• `storage` — save your sessions and settings locally and via your browser's sync.
• `alarms` — run scheduled sessions, tab snooze, auto-save, and backups.
• `notifications` — notify you when a scheduled session or snoozed tab opens.
• `commands` — keyboard shortcuts.
• `contextMenus` — right-click "Save tab" actions.
• `scripting` + optional `` host access — optional, off by default. Only requested at runtime if you enable advanced page-content features (form-data preservation, YouTube timestamp resume, tab thumbnails). You can revoke it any time in Settings.
• `activeTab` — limited, gesture-scoped access used in place of broad host access where possible.
• `sidePanel` — show TabStash in the browser side panel.
• `unlimitedStorage` — lets your saved sessions, tab thumbnails, and workspaces grow beyond the default 10 MB local-storage limit so large libraries are never silently truncated. This data stays on your device.

Data retention and deletion

All data is on your device. Uninstalling the extension removes its local data. You can also export your data as JSON/Markdown at any time, and delete sessions (with a recoverable trash) from within the extension.

Contact

Questions about this policy or the extension:

• Email: aiextensions@proton.me