Tablore — Privacy Policy

Effective: 2026-09-17 · Contact: support@tablore.link · Site: https://tablore.link

Summary

Your data lives on your computer, not ours. Tablore stores folders, tags, notes, schedules, and sessions in chrome.storage.local — a private notebook Chrome keeps just for Tablore. Nothing is sent to a server unless you choose to (BYOK cloud models or a link you explicitly share).

Data we store locally (never transmitted by us)

Tab metadata you act on: title, URL, domain, favicon URL (GET_TABS only when side panel / overlay is open)
Your organization: virtual folders (id, name, tabIds, urls, source, updatedAt), tags, notes, schedules, saved sessions (max 50), settings, freemium usage counters
Settings: AI mode (local/BYOK), provider, model, endpoint, theme, Pro flag, license key
Storage key: chrome.storage.local (folders, tags, notes, schedules, sessions, settings, usage, storageVersion). No IndexedDB, no remote DB, no account, no analytics in v0.1.0.

Data you optionally send (your choice)

BYOK cloud providers (OpenAI, Gemini, OpenRouter): when you paste a key and run Organise / Share with AI, tab titles+domains (grouping) or page text excerpt (Share with AI, max ~8k chars via chrome.scripting) are sent directly from your browser to that provider under their terms. Keys stay in chrome.storage.local and are redacted (***) on Export.
Local providers (Ollama, LM Studio, OpenCode, Custom endpoint): requests go to http://localhost:* / your URL. Nothing leaves your machine except to your own server.
Local AI mode (default): embeddings run on-device via Transformers.js (all-MiniLM-L6-v2) in an offscreen WASM document. Fully offline.
Sharable links: backendless — encoded as a data:text/html page + markdown copied to your clipboard. No Tablore server persists them (a tablore.link/s/xxx backend is future, opt-in).
Bookmarks: only when you click Bookmark — creates Tablore - YYYY-MM-DD folders via chrome.bookmarks. Permanent until you delete them.

Permissions — why each is needed

Permission	Use
`tabs`, `tabGroups`	Read open tabs, apply AI groups (3–8 named colored groups), focus/close duplicates
`bookmarks`	Save grouped bookmark folders on demand
`storage`, `unlimitedStorage`	Local notebook (typical 200 tabs ≈ 40KB JSON, no 5MB ceiling)
`offscreen`	Run local embedding model (Transformers.js WASM)
`alarms`	Fire scheduled folder auto-open (`schedule:<id>`)
`scripting`	Share-with-AI excerpt of the single tab you select (Pro)
Host `api.openai.com, generativelanguage.googleapis.com, api.anthropic.com, api.groq.com, openrouter.ai, localhost, 127.0.0.1, cdn.jsdelivr.net, huggingface.co`	BYOK endpoints + model CDN. No other hosts contacted.

We do not use history, cookies, webNavigation, or remote code. No advertising, no sale of data, no cross-site tracking.

Updates, uninstall, portability

Updating (Store → Update): same extension ID, same notebook — nothing lost. Migrations are forward-only and idempotent (storageVersion: 2).
Uninstalling: Chrome deletes chrome.storage.local. Recover via (1) re-install + Settings → Import your tablore-backup-YYYY-MM-DD.json, or (2) Bookmarks Manager → Tablore - YYYY-MM-DD folders (separate permanent store).
Two computers: two notebooks. Folders view → Export on A → Import (Merge/Replace) on B. Cloud sync (encrypted, opt-in) is post-Store.

Retention & security

Local data retained until you delete it (folder/tag/note delete, session overwrite, or uninstall).
Never call chrome.storage.local.clear() in code; Export redacts API keys unless you opt Include keys.
Future sync: encrypted copy on tablore.link, local stays source of truth; BYOK keys never synced.

Children

Tablore is a general productivity tool, not directed at children under 13. No accounts, no behavioral data collection.

Changes

Material changes will bump this date and ship in the Store listing + in-extension changelog. Continued use after update constitutes acceptance.