Privacy policy

Who we are

Tabkeep is made by Nordic Logic (nrdc.io). Questions or requests about your data: kontakt@nrdc.io.

Your sessions stay on your computer

The extension stores your windows, tabs (address, title, icon), tab groups, session names, folders, tags, notes and version history in your browser's own extension storage on your computer. It is never sent to us. The extension doesn't read the content of the pages you visit; its only page script runs on s.nrdc.io share pages, to offer "Open all in Tabkeep".

When you remove the extension, the browser deletes this data. Export your sessions first if you want to keep them.

Pro backup and sync: encrypted, in your own Google Drive

• Backup and sync are off until you turn them on. Only then does Tabkeep ask for Google Drive access.
• Your sessions are encrypted in your browser with AES-GCM, using a key derived from a passphrase that only you know. The passphrase never leaves your devices.
• The encrypted file is stored in the hidden app-data folder of your Google Drive (the drive.appdata permission). Tabkeep can only see the files it created there, not the rest of your Drive.
• The data goes straight from your browser to Google. It doesn't pass through our server, and we have no copy of it or of your key.
• Because we don't have your passphrase, we can't recover your backup if you lose it.

Google's handling of your Drive is covered by Google's privacy policy.

Share links

When you share a session, and only then, the extension sends it to our server so it can be shown at an address like s.nrdc.io/abc123. We store:

• the title you gave it, and the address and title of each tab (not icons, groups or notes);
• when it was created and when it expires;
• if you set a password (Pro): a salted scrypt hash of it, never the password itself;
• a SHA-256 hash of the secret token that lets you delete the link;
• a salted SHA-256 hash of your IP address, used only to limit how many links one address can create per hour;
• if the link was made with Pro: a SHA-256 hash of your license key.

Anyone who has the link can see the shared tabs, unless you protected it with a password. Share pages tell search engines not to index them. Free links are deleted after 30 days; Pro links stay until you delete them. You can delete a link from Tabkeep at any time and it is removed from our database straight away.

When someone opens a password-protected link and gets the password wrong, we keep a salted hash of their IP address for up to a day to slow down guessing.

Licenses and payments

Payments are handled by Lemon Squeezy, which acts as merchant of record. They process your payment details, address and email under their own privacy policy; we never see your card.

When you enter a license key, the extension sends it to our server, which checks it with Lemon Squeezy. We store a SHA-256 hash of the key (not the key), its status, plan, expiry date and the related Lemon Squeezy order and subscription numbers. Lemon Squeezy notifies our server when a subscription renews, pauses, is cancelled, expires or is refunded, so your Pro status stays correct.

Websites

tabkeep.nrdc.io and s.nrdc.io use no analytics, no cookies and no third-party scripts or fonts. Our host, Vercel, processes request data such as IP addresses to deliver the pages and protect against abuse. Our database runs on Neon. Both are processors acting for us.

Your rights

Under the GDPR you can ask us for access to, correction of or deletion of personal data we hold about you, and you can complain to your data protection authority. Since most of your data never reaches us, the fastest way to control it is in the extension itself. For anything else, write to kontakt@nrdc.io.

Changes

If this policy changes, we update the date at the top and list the change in the changelog.