Privacy Policy

TabEz — Browser Extension · Last updated: September 6, 2026

1. What is TabEz?

TabEz is a browser extension that replaces your new tab page with a customizable productivity dashboard featuring a clock (multiple face styles), real-time weather, a to-do list with categories and drag-and-drop, a calculator with history, website shortcuts (built-in and custom), a speed test launcher, 8 color themes with dark mode, and optional cloud synchronization with encrypted storage.

2. Data We Collect

Without an account (default)

If you use TabEz without creating an account, your settings, notes, and shortcuts remain in your browser's localStorage and are not sent to the TabEz sync server. When you use weather features, the location query you provide or approve is sent directly to WeatherAPI.com.

With an account (optional)

If you choose to sign up for cloud sync, we collect:

• Email address — used for account creation and login.
• Password — transmitted to our server over HTTPS for authentication and hashed with bcrypt (12 rounds) before storage. We never store your plain-text password.
• Encrypted settings backup — your dashboard data (notes and categories, shortcuts, theme, clock, location preferences, and calculator history) is sent to the server for automatic synchronization and encrypted at rest.

Technical error reports

Configured builds offer optional extension error reporting under Settings > Privacy & Diagnostics. It is off by default, works independently of account sign-in, and can be turned off at any time. When enabled, filtered technical errors are sent to Sentry to help diagnose faults. Reports include the affected operation, software version, browser family, error type, code locations and, where relevant, an HTTP status. They omit dashboard content, account identifiers, email, credentials, request bodies and headers, browsing history and raw error text. No screen or session recordings are collected.

The TabEz service may also send filtered operational error reports to Sentry, independently of the extension preference, without attaching account identifiers or request data. Sentry receives the sender's IP address as part of network communication; filtered reporting is not a guarantee of anonymity.

3. How We Use Your Data

• Email — solely for authentication (login).
• Backup data — solely to automatically synchronize, merge, and restore your dashboard data across authenticated devices or after reinstalling.

Technical error reports are used to diagnose and fix software problems. We do not use your data for advertising, behavioral analytics or profiling.

4. Third-Party Services

• WeatherAPI.com — used to fetch weather data based on a location you provide. Your location query is sent to their API. See WeatherAPI's privacy policy.

Sentry processes technical error reports as described above. See Sentry's privacy policy. Account storage is described below. We do not sell your personal data.

5. Data Storage & Security

• Account data is stored in a PostgreSQL database hosted on Neon.
• All communication between the extension and our server uses HTTPS.
• Passwords are hashed with bcrypt. Refresh tokens are hashed and rotated on each use.
• Backup data is encrypted at rest on the server using AES-256-GCM.

6. Data Retention & Deletion

Diagnostic reports are retained according to the reporting project's configured retention period. Turning off extension reporting stops new reports but does not delete previously sent reports or recall requests already in transit. Reports do not include account identifiers, so deleting your TabEz account does not automatically locate or delete diagnostic reports. Contact us with questions about these reports.

You can delete your account at any time from the extension's sync panel. Deleting your account permanently removes all associated data from our servers, including your email, hashed password, and backups. This action is irreversible.

7. Permissions

• Storage — to save your settings locally in your browser.
• Tabs — required for the new tab override functionality.
• Geolocation — only when you enable auto-detect location for weather (optional, requires your consent).
• Network access — to communicate with WeatherAPI.com for weather data, our account/sync service, and Sentry when optional extension error reporting is enabled.

8. Children's Privacy

TabEz does not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

10. Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository.