Privacy Policy

TabFlow - Visual Bubble Tab Manager

Effective date: April 3, 2026 · Version 1.0

1. Who We Are

TabFlow is a Chrome browser extension that provides visual tab management through coloured bubbles, helping users organise, group, snooze, and protect their browser tabs. It is developed and maintained by NeatStack Studios ("we", "us", "our").

TabFlow is distributed via the Chrome Web Store. Subscriptions are processed by LemonSqueezy, our payment provider.

Single Purpose

TabFlow has a single, clearly defined purpose: to help users visually organise and manage their browser tabs using coloured bubble groups. All features (bubble grouping, tab snoozing, close protection, clipboard history, page highlights, presets, and notes) serve this purpose. The extension does not serve ads, inject affiliate links, modify search results, or perform any function unrelated to tab management.

2. Data We Collect

TabFlow is designed with a local-first, privacy-by-default architecture. We collect no personal information. The extension handles the following data, all stored locally on your device:

Data type	Description	Storage location
Bubble data	Metadata about your tab groups (bubbles): name, colour, icon, tab IDs, Chrome group ID, collapsed state, and creation timestamp. No page content is stored.	Local only (chrome.storage.local)
Extension settings	Your preferences: auto-group behaviour, tab count display, theme, collapse-on-switch, suspend inactive tabs, suspend delay.	Local only
Layout presets	Saved bubble configurations that you can restore later. Contains bubble names, colours, icons, and the URLs of tabs in each group.	Local only
Snoozed tabs	Tabs you have snoozed for later: tab URL, title, favicon URL, snooze duration, and wake-up timestamp.	Local only
Protected tabs	Tab IDs marked for close protection (auto-reopen if accidentally closed). Stores tab ID, URL, and bubble association.	Local only
Clipboard history	Text you copy (Ctrl+C) on web pages, stored with a timestamp and the source domain. No images, files, or passwords are captured. Limited to 500 entries with automatic cleanup.	Local only
Page highlights	Text you highlight on web pages using the highlight toolbar, stored with the selected colour, page URL, and timestamp. Limited to 1,000 entries.	Local only
Bubble notes	Notes you add to individual bubbles. Limited to 200 notes per bubble, 2,000 total.	Local only
Trial start timestamp	The date and time you installed the extension, used to calculate the preview period.	Local only
License key	The key you manually enter to activate the full version.	Local + sent to LemonSqueezy for validation (see Section 6)

3. Data We Do NOT Collect

To be absolutely clear, TabFlow does not collect, transmit, or have access to:

• Browsing history or specific page URLs (tab URLs are stored locally for presets and snooze only)
• Page content, text, or screenshots (beyond text you explicitly copy or highlight)
• Keystrokes or form input
• Personal information (name, email, address, phone number)
• Device identifiers, IP addresses, or fingerprinting data
• Analytics, telemetry, or usage metrics sent to us
• Cookies or cross-site tracking
• Data from other extensions or applications

Preview and unsubscribed users generate zero network requests. The extension makes no outbound connections whatsoever unless you manually enter a license key.

4. How We Use Your Data

• Bubble data — used to create, display, and manage Chrome tab groups. This data never leaves your device.
• Settings & presets — used to personalise the extension behaviour and restore saved tab layouts. This data never leaves your device.
• Snoozed tabs — used to reopen tabs after their snooze timer expires. URLs are stored so tabs can be recreated. This data never leaves your device.
• Protected tabs — used to automatically reopen tabs that are accidentally closed. This data never leaves your device.
• Clipboard history — used to let you review and re-copy text you previously copied. This data never leaves your device.
• Page highlights — used to display and manage text you have highlighted on web pages. This data never leaves your device.
• Bubble notes — used to display notes you attach to bubble groups. This data never leaves your device.
• Trial timestamp — used locally to determine whether your preview period is still active. This data never leaves your device.
• License key — sent to LemonSqueezy's API solely to verify that your subscription is valid. No other data accompanies this request.

5. Data Storage & Retention

All data is stored locally on your device using Chrome's chrome.storage.local API. No data is stored on external servers.

Storage limits

Data type	Maximum entries
Clipboard items	500 (oldest auto-removed)
Page highlights	1,000 (oldest auto-removed)
Notes per bubble	200
Total notes	2,000

When storage approaches Chrome's 10MB limit, the extension automatically trims the oldest clipboard items, highlights, and notes to free space.

Data deletion

• You can delete individual bubbles, clipboard items, highlights, and notes at any time from the side panel.
• Uninstalling the extension permanently and irrecoverably removes all stored data.
• We have no ability to recover your data because we never had access to it.

6. Data Sharing & Third Parties

We do not sell, rent, trade, or share your data with any third party. Period.

There is one narrow exception:

We use no analytics services (Google Analytics, Mixpanel, Amplitude, etc.), no crash reporting tools, no A/B testing frameworks, and no advertising SDKs.

7. Chrome Permissions Explained

Chrome extensions must declare permissions upfront. Here is exactly why TabFlow needs each one:

Permission	Why it's needed	What it can access
storage	Save bubble configurations, settings, presets, snoozed/protected tabs, clipboard history, highlights, notes, trial status, and license key locally.	Extension's own local storage only. Cannot access other extensions' or websites' storage.
tabs	Read tab URLs, titles, and favicons to display them in the bubble manager. Move tabs between groups. Detect when tabs are created, removed, or updated. Reopen snoozed and protected tabs.	Reads tab metadata (URL, title, favicon). Does not read page content. Tab URLs are stored locally for presets and snooze features only.
tabGroups	Create, update, collapse, expand, rename, and recolour Chrome tab groups (the core bubble feature). Sync existing tab groups on startup.	Manages Chrome's native tab groups. Does not access tab content, only group metadata (title, colour, collapsed state).
sidePanel	Display the TabFlow management panel as a Chrome side panel, providing persistent access to bubbles, tabs, clipboard, and settings without a popup.	Opens the extension's own side panel UI. Does not access any browser or page data through this permission.
contextMenus	Add right-click menu options to quickly add tabs to bubbles, snooze tabs, or protect tabs without opening the side panel.	Adds menu items to the browser's right-click context menu. Does not access page content through this permission.
alarms	Schedule wake-up timers for snoozed tabs and periodic storage quota checks.	Sets and responds to timer-based alarms within the extension. No external communication.
content_scripts (http://*/*, https://*/*)	Inject the bubble picker overlay (quick-add floating UI), toast notifications, clipboard capture (listens for copy events), and the page highlight toolbar on web pages.	Injects UI overlays onto pages. Listens for user-initiated copy events to capture highlighted text (clipboard history). Listens for text selection to show the highlight toolbar. Does not read page content unprompted or modify page functionality.

8. Free Trial & Subscription

Free trial

• When you install TabFlow, a preview period begins so you can explore the extension.
• During the preview, all features are fully unlocked with no restrictions.
• The preview is tracked locally using an install timestamp. No account creation is required.
• No payment information is collected or requested during the preview.

After the preview

• When the preview expires, TabFlow requires an active subscription to continue working. All features are disabled until you subscribe.
• You can subscribe for $2.99 AUD/month (includes a 2-day free trial via LemonSqueezy) or purchase a $29.99 AUD one-time lifetime license for permanent access.
• Subscriptions are processed by LemonSqueezy. You receive a license key which you enter in the extension's settings.
• Monthly subscribers can cancel at any time through LemonSqueezy. The extension will continue to work until your current billing period ends. Lifetime licenses never expire.

Refunds

Refund requests are handled through LemonSqueezy in accordance with their refund policy. Contact us if you need assistance.

9. Your Rights & Data Control

You have full control over all data at all times:

• View: All data is visible in the TabFlow side panel. There is no hidden data.
• Export: Presets can be exported and shared. Clipboard and highlights can be copied individually.
• Delete: You can delete individual items (bubbles, clips, highlights, notes) or clear entire categories at any time.
• Deactivate license: You can remove your license key at any time. Features will be disabled until a new key is activated.
• Uninstall: Uninstalling the extension permanently removes all data from your device. Nothing persists.

Because we never have access to your data in the first place, there is nothing for us to delete on our end. Your data is entirely under your control.

GDPR, CCPA, and other privacy regulations

TabFlow is designed to be compliant by architecture:

• We act as a data processor only in the narrow sense that our code runs on your device. All data remains on your device.
• No personal data is transmitted to us, so there is no data to request, port, or delete from our systems.
• If you have activated a subscription, LemonSqueezy holds your payment and email information as the payment processor. You can exercise your data rights with LemonSqueezy directly via their privacy policy.

Google API Services User Data Policy

TabFlow's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

• We only use permissions to provide the features described in this policy. We do not use data for advertising, market research, or credit assessment.
• We do not sell user data to third parties.
• We do not use or transfer user data for purposes that are unrelated to the extension's core functionality.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.

10. Cookies & Tracking Technologies

TabFlow does not use cookies, web beacons, pixels, fingerprinting, or any other tracking technology. We do not track you across websites. We do not build profiles. We do not serve or facilitate advertising.

11. Security

• All data is stored locally using Chrome's built-in chrome.storage.local API, which is sandboxed to the extension and inaccessible to websites or other extensions.
• License key validation is performed over HTTPS (TLS-encrypted) connections to LemonSqueezy's API.
• The extension contains no remote code execution. All code is bundled in the extension package and reviewed by the Chrome Web Store.
• The extension does not inject scripts from external sources and does not use eval() or similar dynamic code execution.
• A Content Security Policy is defined in the manifest: script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'.

12. Children's Privacy

TabFlow does not knowingly collect personal information from anyone, including children under 13 (or the applicable age in your jurisdiction). Because no personal data is collected at all, the extension can be used by people of all ages. However, the subscription/payment process through LemonSqueezy may require the user to be at least 18 years old or have parental consent.

13. International Users

TabFlow operates entirely on your local device. No data crosses borders because no data leaves your device. The only exception is the license key validation request (subscribers only), which is sent to LemonSqueezy's servers. LemonSqueezy is a US-based company; please refer to their privacy policy for information about their data handling practices.

14. Changes to This Policy

We may update this privacy policy from time to time. When we do:

• The "Effective date" at the top of this page will be revised.
• Material changes (e.g. new data collection, new third-party services) will be communicated through the extension's settings panel.
• Previous versions of this policy will be available upon request.

Continued use of the extension after changes constitutes acceptance of the revised policy.

15. Contact

If you have questions, concerns, or requests regarding this privacy policy or your data, you can reach us at:

• Email: neatstackstudios@gmail.com
• Publisher: NeatStack Studios

We aim to respond to all privacy-related enquiries within 5 business days.