Privacy Policy
Effective 12 July 2026
Tab Keeper is a browser extension that saves your open tabs into a shelf with versioned, verified backups. This policy explains, in plain language, what we collect, why, and the choices you have. The short version: on the free plan, your tab data never leaves your browser. Cloud Backup is an optional paid feature you turn on yourself, and even then we store only encrypted data we cannot read.
Who we are (data controller)
The data controller is Hyperbach Services OÜ ("Hyperbach", "we", "us"), operating the hyperbach.com family of products, including Tab Keeper. You can reach us at support@hyperbach.com for any privacy question or request.
Free plan: nothing leaves your browser
All saved tabs — the URLs and titles you save, plus group names, snapshots, and trash — live entirely in Chrome's local extension storage on your own machine. We do not receive, see, or store any of it, and nothing is transmitted to us or anyone else. You do not need an account to use the free plan, so we hold no data about you at all.
Pro plan: optional Cloud Backup, encrypted so we can't read it
Cloud Backup is an opt-in feature of the paid Pro subscription. It is off until you explicitly enable it, and you choose where your backups go. Before anything leaves your browser, the extension encrypts it with AES-256-GCM using a key derived (PBKDF2) from a passphrase that never leaves your device. We — and any storage provider — only ever see ciphertext. This is zero-knowledge by design: we deliberately cannot read your tab URLs, titles, or any backup contents. If you forget your passphrase, not even we can recover your data.
You choose one of two destinations:
(a) Our server. The encrypted backup is stored on our server, hosted by Hetzner in Germany (EU). We store only the ciphertext.
(b) Your own Dropbox. The same encrypted backup is written to an app-scoped folder in your personal Dropbox. In that case the data lives in your Dropbox, not on our servers.
Account data we hold
On either plan, we only hold account data if you choose to sign in. In that case we hold your email address and your subscription status — and nothing more. We never hold or can read any of your tab or browsing content. Sign-in is handled by Clerk and payments by Stripe; we never see or store your card details.
What we collect and why (lawful basis)
We practise data minimization: we collect the least we need, and we designed the product so that the sensitive part — your tabs — is unreadable to us.
Email and subscription status — to give you your account and run your subscription. Lawful basis: performance of a contract (Art. 6(1)(b) GDPR).
Encrypted cloud backups — stored only when you turn Cloud Backup on. Lawful basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by turning the feature off and deleting your backups.
Where your data is stored
Account data and any backups stored on our server are hosted by Hetzner in Germany (EU). If you choose the Dropbox destination instead, those encrypted backups live in your own Dropbox account under its own terms.
Service providers (sub-processors)
We rely on a small set of processors strictly to operate the product. Each handles data under its own policy:
Clerk — authentication (email, sign-in). Handles your account identity. Privacy policy.
Stripe — payments. Processes your subscription billing; we never see your card details. Privacy policy.
Hetzner — EU hosting (Germany) for our server and any backups you store with us. Privacy policy.
Dropbox — only if you choose it as your backup destination. Stores your encrypted backups in your own Dropbox. Privacy policy.
Security
Data is encrypted in transit with TLS. Backup contents are additionally encrypted at rest on your device before upload, using client-side, zero-knowledge AES-256-GCM as described above — so the party that stores them, including us, only ever holds ciphertext.
Retention
Cloud backups are kept as a rolling ring of roughly your latest 10 versions; older versions are automatically dropped. Backups stay until you delete them or close your account, at which point they are removed. Account and billing data is kept while your subscription is active and for as long afterwards as we are legally required to (for example, tax and accounting obligations).
Your rights
Under the GDPR you have the right to access, export, correct, and erase your data, to restrict or object to processing, and to withdraw consent for Cloud Backup at any time.
Access & export. Your tab data is already yours locally — the extension exports it on demand. For account data, email us and we will provide a copy.
Rectification. You can update your account details, or ask us to correct them.
Erasure (deletion). You can delete all of your cloud backups from inside the extension at any time, or ask us to delete them by emailing support@hyperbach.com. Closing your account wipes your account data and any backups we hold for you. You also have the right to lodge a complaint with your local data protection authority.
What we never do
We do not sell or rent your data — to anyone, ever. We run no advertising, and we do not track, profile, or run analytics on your browsing or tab activity. We do not read your tab contents; on Cloud Backup we cannot, because it is encrypted before it reaches us.
Changes
We may update this policy. If we make a material change we will update the effective date above and, where appropriate, notify you.
Contact
Tab Keeper is an independent tool and is not affiliated with OneTab, Session Buddy, Tab Session Manager, or Google. All product names are trademarks of their respective owners.