Privacy Policy — Tab Shelf

Last updated: 28 September 2026. Tab Shelf ("the extension") is published by Malvatech (contact: [email protected]). This policy explains what data the extension handles.

What the extension stores

Sessions and snapshots — the URLs, titles, favicon addresses, pinned flags and tab-group names/colours of the windows you save or that the automatic snapshot captures — plus your settings, an anonymous random install identifier and, if you buy Pro, your licence key and the date it was last checked. All of it is stored in your browser's local extension storage (chrome.storage.local). Incognito windows are never captured.

What leaves your computer

Nothing, with one exception: if you activate a Pro licence, the extension sends the licence key and the anonymous install identifier to our server (clip.malvatech.app, hosted on Cloudflare), which checks them with our payment provider and answers whether the key is valid. It does not receive any URL, title or session data. We keep aggregate daily counters (number of licence checks) with no personal data. Cloudflare may log IP addresses for security for a short period under its own policy.

Backups and exports

The Export button and the optional weekly backup write a JSON file to your own computer (Downloads/Tab Shelf/). The extension asks for the "downloads" permission only when you turn the weekly backup on, and never reads files.

Payments

Pro purchases are processed by Polar Software Inc. as merchant of record. Polar collects your email and payment details under its own privacy policy; we receive your email address and the licence key to provide support and refunds.

What we do not do

No analytics or tracking scripts. No advertising. No cloud sync, no server-side copy of your tabs. No selling or sharing of data with third parties beyond Polar (for payments). No remote code: all code ships inside the extension package.

Erasing your data

Uninstalling the extension removes everything it stored. Deleting sessions inside the extension moves them to a 30-day trash, which you can empty at any time.

Your rights

You can request access to or deletion of any data we hold about you (in practice: your purchase email and licence key) by writing to [email protected]. EU/EEA users have the rights set out in the GDPR, including the right to lodge a complaint with a supervisory authority.

Changes

We will update this page when the policy changes and note the date above.