TabPocket — Privacy Policy
Last updated: 2 November 2026 · Applies to the TabPocket browser extension
TabPocket is a local-first browser extension. It does not have a server, does not require an account, and does not transmit your data anywhere. Everything the extension records is stored inside your own browser profile on your own device.
1. What the extension stores
| Data | Where it lives | Why |
|---|---|---|
| Saved tab sessions (page titles and URLs) | chrome.storage.local on your device |
To restore a collapsed set of tabs later |
| Bookmarks and tags you create in TabPocket | chrome.storage.local on your device |
To show and search your bookmark list |
| Browsing time statistics (domain, hour, duration, open count) | IndexedDB on your device | To render your own usage charts |
| Settings (language, excluded domains, tracking on/off) | chrome.storage.local on your device |
To remember your preferences |
| Visit history — read only, to count how often a bookmarked page was opened | Read in memory when you open the bookmark views; no copy of your history is kept | Sort bookmarks by how often you opened them, and rank them in the audit |
One clarification about browsing history, because the stores ask about it separately: the extension reads your history to count opens, and never writes to, edits or deletes history entries. What it keeps is a number attached to a bookmark you already saved — not a copy of the sites you visited.
The extension never uploads, syncs, or backs up this data to any remote server. There is no analytics, no telemetry, no advertising SDK, and no remote code. Removing the extension deletes its local data.
2. Why each permission is requested
| Permission | Reason |
|---|---|
tabs |
Read the title and URL of open tabs so they can be collapsed into a session and restored, and count which page is currently active for the timer. |
storage / unlimitedStorage |
Save sessions, bookmarks, settings and statistics locally. storage.session
holds only the timer's volatile start point, which is meant to be discarded when the
browser closes. Unlimited storage is used so long-term statistics do not hit the
default quota. |
alarms |
Run a short heartbeat (one minute by default, configurable down to 30 seconds) that settles how long the current page has been in the foreground. This is the only periodic task. |
idle |
Stop the timer when you are away from the keyboard or the screen is locked, so idle time is not counted as browsing. |
bookmarks |
Read your existing browser bookmarks for the "Organize bookmarks" and "Bookmark audit" features, and let you delete a bookmark from the audit list. This is only used when you open those two features. |
history |
Count visits to pages you have already bookmarked: the bookmark list is sorted by lifetime visit count, and the audit counts visits within a chosen period (30 / 90 / 365 days). History is only read, never modified, and never leaves the device. |
contextMenus |
Add the right-click item "Add this page to TabPocket". |
3. Data sharing
None. TabPocket does not sell, transfer, or disclose any user data to third parties. No data is used for advertising, profiling, creditworthiness, or lending purposes.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Concretely: browsing history and the idle state are read on the device, used only to rank the user's own bookmarks and to pause the timer when they step away, and are never transferred off the device. There is no server, no analytics and no third-party SDK, so there is no party the data could be shared with.
4. Your control
- Statistics can be switched off, and can be cleared at any time from the report page.
- Excluded domains are never recorded.
- Sessions and bookmarks can be exported to a JSON file you own, and deleted at will.
- Uninstalling the extension removes all of its stored data.
5. Contact
Questions or requests: GitHub Issues.
中文版
数据全部留在本机
TabPocket 是纯本地浏览器扩展：没有服务器、不需要账号、不上传任何数据。扩展记录的一切都保存在你自己电脑上的浏览器配置目录里。
保存了什么
- 收拢的标签会话（页面标题与网址）→ 本地
chrome.storage.local - 你在扩展内创建的收藏与标签 → 本地
chrome.storage.local - 浏览时长统计（域名、小时、时长、打开次数）→ 本地 IndexedDB
- 设置（语言、排除域名、统计开关）→ 本地
chrome.storage.local - 浏览历史（商店表单里的分类叫「网络记录」）：只读，仅用于统计已收藏页面的打开次数；显示时在内存中计算，不保存你的访问列表
关于浏览历史单独说明一句（商店会单独问这一项）：扩展读取历史是为了数打开次数，从不写入、修改或删除历史记录。留下来的是一个挂在「你自己收藏过的页面」上的数字，不是你访问过哪些网站的副本。
无统计分析、无遥测、无广告 SDK、无远程代码。卸载扩展即删除其本地数据。
权限用途
tabs：读取标签页标题与网址，用于收拢/恢复会话与判断当前计时页面。storage/unlimitedStorage：本地保存会话、收藏、设置与统计；storage.session只放计时器的临时起算点，关闭浏览器即丢。alarms：以短周期心跳（默认 1 分钟，可调至 30 秒）结算当前页面的停留时长，这是唯一的定时任务。idle：离开键盘或锁屏时停止计时，避免挂机刷时长。bookmarks：仅在「整理浏览器收藏」「收藏体检」中使用，读取原生书签并允许删除单条。history：仅用于统计已收藏页面的访问次数 —— 收藏列表按累计次数排序，体检页按指定区间（30/90/365 天）计数。只读、不改写、不外传。contextMenus：提供右键「收藏此页面到 TabPocket」。
数据共享
没有。不向任何第三方出售、转让或披露用户数据，也不用于广告、画像、信用评估等用途。
Limited Use 声明
从 Google API 获得的信息，其使用将遵守 Chrome Web Store 用户数据政策，包括其中的 Limited Use 条款。
具体到本扩展：浏览历史与空闲状态都在本机读取，只用于给用户自己的收藏排序、以及在人离开时暂停计时，绝不传出设备。没有服务器、没有统计、没有第三方 SDK，也就不存在可以把数据共享出去的对象。
你可以控制什么
- 统计可随时关闭，也可在报表页一键清空。
- 加入排除名单的域名不会被记录。
- 会话与收藏可导出为 JSON 备份，也可随时删除。