TabVault — Privacy Policy

Last updated: October 24, 2026

TabVault — Session Manager & Tab Saver is built to be private by construction: it has no servers, no accounts, no analytics, and it never sends your data anywhere.

What TabVault stores

TabVault stores the following only on your device, in your browser's local storage (IndexedDB and chrome.storage.local):

Tab URLs, page titles, and favicon URLs — for the snapshots, sessions, and closed-window records you see in the app.
Tab order, pinned state, and tab-group titles/colors, so restores match how your windows were arranged.
Your settings (snapshot interval, retention periods, theme, accent, auto-suspend threshold) and lifetime feature counters (how many snapshots, restores, suspensions — counts only, no content).

TabVault never stores page content, form data, passwords, cookies, or browsing data from private (incognito) windows — incognito windows are never captured at all.

What TabVault does NOT do

It does not collect, transmit, sell, or share any personal data.
It has no analytics, tracking, ads, or third-party code phoning home.
It does not use remote code. All code is bundled in the extension.
By default it declares no required host permissions and injects no content scripts, so it cannot read the pages you visit. From v1.0.2, an OPTIONAL host permission exists for one feature only (see below): it is off by default, granted only if you turn on the on-page screenshot button in Settings, and it can be turned off again at any time.

Permissions, one by one

Permission	Why TabVault needs it
`tabs`	List your open tabs (URL/title) to snapshot them and to reopen tabs when you restore a session.
`tabGroups`	Read group titles/colors and recreate groups on restore.
`storage`	Save your settings in `chrome.storage.local`.
`alarms`	Schedule periodic automatic snapshots.
`unlimitedStorage`	Keep snapshot history in IndexedDB without Chrome evicting it under storage pressure.
`sidePanel`	Show the TabVault side panel.
`favicon`	Display site icons for saved tabs via Chrome's built-in favicon service.
`activeTab`	Only for the full-page screenshot you explicitly trigger (popup Screenshot button): temporarily access the tab you are on so its visible area can be captured.
`scripting`	Only for the full-page screenshot you explicitly trigger: scroll the captured page slice by slice and scroll it back afterwards.
Optional host access (`<all_urls>`, off by default)	Only if you turn on "Screenshot button on every website" in Settings: show a small camera button on web pages so you can screenshot that page with one click. The button does not read page content, and screenshots are downloaded to your device only — they are never sent anywhere. Turn the toggle off and the button and the permission go away.

Deleting your data

Delete individual snapshots, sessions, and recovery records in the Manager at any time.
Automatic history is pruned after the retention period you set (default 7 days; closed windows 14 days).
Removing the extension deletes everything it stored.

Contact

Questions: use the support contact on TabVault's Chrome Web Store listing.