Your data in Tabgrab

Who we are

Tabgrab is a small product run from the Netherlands. It is responsible for your data under the EU General Data Protection Regulation (GDPR). For anything about your data, email privacy@tabgrab.dev.

This policy covers the website at tabgrab.dev (the web app), the Tabgrab Mac app and the Tabgrab Chrome extension.

What we store

• Your account: your name, your email address and your password. The password is stored only as a secure hash, so nobody can read it, us included.
• Your profile picture, if you add one.
• Your projects (we call them grabs): their names and pictures.
• The pages you save (tabs): the address, the title, a short description and the site's icon. For an app link, such as one that opens Slack, the app's name and icon.

We only store pages you choose to save. Tabgrab does not record which sites you visit, how you use them or what you do on them.

How we use it

Only to run Tabgrab for you: to log you in, to show your projects on every device you use, and to send you the emails you need to sign up and log in. The legal basis is our agreement with you to provide the service. We do not use your data for advertising, profiling or anything unrelated to Tabgrab.

When you add a page in the web app, our server visits that page once to read its title, description and icon. The site sees a request from Tabgrab's server, not from you.

The Chrome extension

The extension saves pages to your projects and opens a project as a tab group. In detail:

• It reads the address, title and icon of the page you are on only when you click Save or choose Tabgrab in the right-click menu. For a link, it reads the link's address.
• When you click Save all tabs in this window, Chrome first asks your permission. It then reads the addresses, titles and icons of the pages in that window, once, to save them.
• Site icons come from Chrome's own icon cache, so the extension does not contact the sites themselves.
• If you turn on Show unread counts on your tiles, Chrome first asks your permission. The extension then reads the titles of your open tabs, such as "Inbox (3) - Gmail", and for sites you saved in a project it stores the site and the number of unread messages, so the web app can show it on the tile. It does not store titles, messages or any other site. Turn it off to remove the stored counts.
• It sends what you save, and your email and password or email code when you log in, to our database over an encrypted connection, and unread counts when you turned them on. Nothing else leaves your browser.
• On your device it keeps your login session and the last project you saved to, so you stay logged in. Log out in the extension to remove them.
• It does not read the content of pages, track your browsing history, or show ads. Apart from unread counts, when you turned them on, it reads nothing in the background.

The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

The Mac app

The Mac app shows the same web app in its own window. To let you add an app as a tab, it reads the list of apps installed on your Mac. That list stays on your Mac. Only the apps you add to a project are saved, with their name and icon.

Cookies and local storage

The web app uses cookies only to keep you logged in. It remembers on your device whether you prefer the detailed or compact view. There are no analytics, advertising or tracking cookies, so there is no cookie banner.

Who else handles your data

We use a few services to run Tabgrab. They process data only on our behalf and under our instructions:

• Supabase: our database and login. It stores everything listed above.
• Vercel: hosts the website. Like any web host, it briefly keeps technical logs, such as IP addresses, to keep the site running and secure.
• Resend: sends the sign-up and log-in emails, so it receives your name and email address.

Some of these services may process data outside the EU. Where they do, they are bound by the European Commission's standard contractual clauses or an equivalent safeguard. We never sell or share your data with anyone else.

How long we keep it

Your projects and saved pages stay until you delete them, which you can do at any time in the app. Your account stays until you ask us to delete it: email privacy@tabgrab.dev from the address on your account, and we delete the account and everything in it within 30 days.

Your rights

You can ask to see the data we have about you, to get a copy of it, to correct it or to delete it. You can change your name, email address and password yourself on the Account page. For anything else, email privacy@tabgrab.dev, and we answer within 30 days.

If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Children

Tabgrab is not meant for children under 16, and we do not knowingly store data about them.

Changes

If we change this policy, we update it here and change the date at the top. If a change affects how we use your data, we tell you by email first.