Privacy Policy

1. Information We Collect

We do not collect analytics, advertising identifiers, or any data for marketing purposes. We do not sell your data to anyone. Specifically, we never see or receive:

• Your bookmarks, folders, or browsing/history data (these are read and processed entirely on your device)
• Cookies or third-party ad-tracking data
• Passwords or form data from other sites

The following is transmitted off your device, but only when the related feature is used, and only to the specific third-party service named in Section 3 — never stored by us beyond what's needed to deliver that feature:

• Your email address — only if you purchase Pro, so Razorpay can process payment and Supabase can email your license key
• Your approximate GPS coordinates — only if you enable the weather widget, sent to Open-Meteo
• Bookmark titles and URLs — only if you manually trigger AI Auto-Categorize on a bookmark, sent to Anthropic's Claude API
• Bookmarked domain names — sent to Google's favicon service to display site icons
• Your license key and an anonymous device fingerprint — sent to our Supabase backend to validate a Pro license
• An anonymous install/update/uninstall event (just event type, browser, and version — no identifiers) — sent automatically to Supabase for aggregate adoption stats
• Your backup file (bookmarks, folders, and settings, as JSON/HTML/Markdown) — only if you turn on Google Drive Backup, uploaded directly to a folder BTM creates in your own Google Drive. This never passes through our servers — it goes from your browser straight to your Drive.
• An amount and two currency codes (e.g. "100 USD to INR") — only if you type a currency conversion into the search box and have turned this on in Settings → Tools (off by default). Sent to the Frankfurter exchange-rate API. No bookmark data, browsing data, or anything identifying you is included.

2. How Your Data Is Stored

All data created in Bookmark Tab Manager — including your bookmarks, folders, spaces, settings, preferences, and the browsing-activity/session view built from your recent browsing history — is stored exclusively in your browser's local storage (chrome.storage.local on Chrome / browser.storage.local on Firefox). This data:

• Never leaves your device
• Is never transmitted to any server
• Is never accessible to us or any third party
• Can be deleted at any time by uninstalling the extension

3. Third-Party Services

Bookmark Tab Manager uses the following third-party services for specific features:

• Open-Meteo API (weather.open-meteo.com) — Used to fetch weather data. Your approximate GPS coordinates are sent to this service only when the weather widget is enabled. Open-Meteo is a free, open-source weather API with no data retention policy.
• Nominatim / OpenStreetMap — Used to convert GPS coordinates to a city name for weather display. No personal data is stored by this service.
• Google Favicon Service — Used to display website icons next to bookmarks. Only the domain names of your bookmarked websites are sent. No personal data is included.
• Unsplash API — Used to fetch random background photos when enabled by you (Pro feature). Only the selected photo category is sent. No personal data is included.
• QR Server API (api.qrserver.com) — Used to generate QR codes for bookmarks on request. Only the bookmark URL is sent. No personal data is included.
• Google Fonts / Noto Emoji CDN — Used to load custom fonts and animated emoji icons if selected. Requests go to Google's servers per their standard privacy policy.
• Anthropic Claude API — Used for the AI Auto-Categorize feature (Pro only). Only the bookmark title and URL are sent to suggest the best folder. No personal data is included.
• Razorpay — Used to process Pro license purchases. Payment is handled entirely by Razorpay. We receive only confirmation that a payment was made — not your card details, name or bank information. Please refer to Razorpay's privacy policy.
• Supabase — Used to validate Pro license keys. Only the license key and an anonymous device fingerprint (not personally identifiable) are transmitted for validation purposes.
• Supabase — Install Analytics — On install, update, and uninstall, the extension sends an anonymous event ping (event type, browser, and version number only — no personal data, no device fingerprint, no identifiers tied to you) so we can see aggregate adoption and uninstall trends. This happens automatically as part of normal extension operation.
• Brevo — Used to send your Pro license key by email after purchase, and to send a one-time 6-digit code if you (or someone with your key) tries to activate it on a new device from the 2nd device onward — a key's very first activation is never gated this way — this confirms the activation with you before it's allowed, and is sent only to the email address already on file for that license.
• Google Drive — Used only if you enable the optional Google Drive Backup feature. When you click "Backup to Google Drive," your bookmarks/folders/settings backup (JSON/HTML, plus Markdown for Pro) is uploaded directly to a "Bookmark Tab Manager Backups" folder that BTM creates in your own Drive — this goes straight from your browser to Google, never through our servers. BTM uses Google's narrowest Drive scope (drive.file), meaning it can only see files/folders it creates itself, never the rest of your Drive. Governed by Google's privacy policy for your Drive account.
• Frankfurter API (api.frankfurter.dev) — Used only for the optional currency-conversion feature in the search box, which is off by default. When enabled and you type a conversion like "100 usd to inr," only the amount and the two currency codes are sent — never your search history, bookmarks, or anything identifying you. Frankfurter is a free, open-source exchange-rate API built on European Central Bank reference rates, with no API key or account required.

4. Permissions Used

Bookmark Tab Manager requests the following browser permissions (same for both Chrome and Firefox):

• storage — To save your bookmarks, folder structure, settings, themes and Pro license state locally in your browser. No data is ever sent to external servers.
• geolocation — Used exclusively for the weather widget on the new tab page. Your location is sent only to the Open-Meteo weather API to fetch current conditions. Your location is never stored, logged or shared. This permission is only active when the weather widget is enabled.
• bookmarks — Used to read your existing browser bookmarks so you can import them into Bookmark Tab Manager with one click. The extension never modifies, deletes or uploads your bookmarks to any server.
• notifications — Used to deliver bookmark reminders you set manually and to show an occasional prompt asking you to rate the extension. All notifications are generated locally.
• alarms — Used to schedule bookmark reminder notifications, an occasional rate-us prompt, a weekly broken-link scan, and — for Pro users only — a daily background check that re-validates your license key with our Supabase backend (same license key + device fingerprint described above). For Free users, nothing leaves your device from this permission.
• tabs — Used to detect your active tab (so features like "save current tab as bookmark" work) and to open the new-tab page / settings page when you click the extension icon or a menu item. Tab URLs are processed locally and never sent to any server.
• contextMenus — Used to add Bookmark Tab Manager options (like AI Auto-Categorize and toggling the extension) to your browser's right-click menu. No data is collected by this permission itself.
• history — Used only for the optional browsing-activity/session view on the new tab page, which shows a local summary of recently visited pages (e.g. "most active hour"). This history is read from your browser, processed, and stored entirely on your device — it is never uploaded anywhere.

We do not request access to your passwords or any other sensitive data beyond what is listed above.

5. Pro License

If you purchase Bookmark Tab Manager Pro, your payment is processed by Razorpay. We receive only a license key confirmation — not your payment information, name, card details or bank account. The license key is validated against our Supabase database using only the key itself and an anonymous device fingerprint (generated from your browser settings — not personally identifiable). From the 2nd device onward, activating a key on a device it hasn't been used on before requires entering a one-time code emailed to the address on file for that license (a key's very first activation is never gated this way), so a key that ends up somewhere it shouldn't (e.g. shared online) can't be activated by someone without access to that inbox.

6. Children's Privacy

Bookmark Tab Manager does not knowingly collect any information from children under 13 years of age, and the extension is not directed at children. The limited data described in Section 1 is only ever transmitted when a user actively purchases Pro, enables the weather widget, or triggers AI Auto-Categorize — it is never collected passively or without an explicit action.

7. Changes to This Policy

We may update this privacy policy occasionally. Any changes will be reflected on this page with an updated date. Continued use of Bookmark Tab Manager after changes constitutes acceptance of the new policy.

8. Contact

If you have any questions about this privacy policy, please contact us at:

yashwanthramsomireddy@gmail.com

Telegram: t.me/BookmarkTabManager