Privacy policy

Last updated: 8 September 2026 · LeoTabs 0.13.1

LeoTabs is developed by Leo (ringlochid). Contact support@ringlochid.me with privacy questions or requests.

Your library stays in your browser

LeoTabs manages tabs, groups, collections and notes in your browser profile. It requires no LeoTabs account and has no developer-operated backend, advertising, analytics or telemetry. The developer does not automatically receive your library or browsing activity. Optional AI and Notion connections send the information described below directly to the service you configure.

Information used on your device

• Tabs and saved work: page titles, full URLs (which can include query parameters or local file paths), tab and window identifiers, groups, colours, ordering, pinned state, spaces, collections, notes and timestamps. These support search, switching, organisation, saving and recovery.
• Recovery: snapshots of saved collections and eligible browser sessions, recently closed pages and action records. These support Undo, Timeline and recovery after interrupted actions. Deleting a collection does not immediately remove its older recovery copies.
• Previews and icons: cached screenshots of active web pages and browser-supplied favicons. Opening the visual switcher may capture the visible current page using temporary active-tab access, even when automatic previews are off. Automatic capture while browsing is off by default and requires optional website access. A screenshot can contain personal information visible on the page. LeoTabs does not send these screenshots to AI providers or its developer.
• Preferences and connections: interface settings, selected provider, model, endpoint, Notion parent page, and any API keys or Notion token you enter.
• Optional browser data: with your permission, history search reads up to 40 matches from the previous 30 days. Bookmark access reads the bookmark tree to choose an export destination and creates bookmarks when you request an export. Browser settings may independently sync those bookmarks.

Data is stored in IndexedDB, extension-local storage and temporary browser storage. LeoTabs does not use Chrome storage sync for its library. Private/incognito tabs are excluded from managed tab operations and preview capture. LeoTabs does not collect page passwords, cookies or form fields as separate data; titles, URLs, notes and screenshots can nevertheless contain sensitive information.

Optional AI connections

AI is optional. Core tab management, website grouping, saving, search and file export work without it. When you save an AI connection and grant its website permission, AI actions send information directly to the configured provider. With a saved key and access, newly saved collections can also be named automatically: this sends their link titles and URLs without a separate prompt on each save.

Topic grouping sends tab titles, URLs and identifiers. Collection organisation sends the collection name, note, link titles, full URLs, link notes and identifiers; existing links may be included as context even when excluded from regrouping. Other naming or organisation requests can include group names and your instructions. Optional filing suggestions also send names, notes and sample URLs from existing collections across your library. A malformed collection response may cause one correction request with the same metadata. Organisation can apply directly with Undo; cancelling or undoing does not retract data already sent.

Current AI tools do not read page-body text or send screenshots or browser-history search results. They infer from metadata, not the full pages. Requests include the selected model and the credential required by your provider. Network services also receive connection information such as your IP address.

Supported destinations are OpenAI, Anthropic, Google Gemini, DeepSeek, or your chosen compatible endpoint. Each provider controls its own processing locations, retention and training practices under your account settings and its policies: OpenAI, Anthropic, Google, and DeepSeek. Review the policy and terms applicable to your API account before connecting. A custom endpoint is operated by whoever controls that address. LeoTabs does not promise zero retention by these services.

Notion, downloads and clipboard

When you choose Send to Notion, LeoTabs sends the selected collection's name, URLs, titles, groups and notes to Notion. Exporting the library sends all its collections. Your token authenticates the requests. Export jobs and their content remain locally available for recovery. People with access to the destination page may see exported information; local Undo cannot remove it. Manage remote copies in Notion under its privacy policy.

File exports and Copy Markdown put the content you choose into a file or the system clipboard. A backup contains spaces, collections, groups, notes, allowed preferences and a recent action-reference log. It excludes API keys, screenshots, browser history, live tab/session IDs and older recovery snapshots. Exports are not encrypted by LeoTabs. Full URLs can include sensitive query parameters. Store and share these files carefully; other applications and backup services you use may access them.

Security and retention

Remote API requests use HTTPS; a compatible service on the same computer may use loopback HTTP. Redirects are rejected. Credentials are restricted to trusted extension contexts and excluded from exports. They are stored in browser-local storage, not an operating-system keychain. LeoTabs does not add its own encryption to the library or saved credentials. Someone with access to your browser profile or device may be able to read them.

Saved collections and preferences remain until you remove them or uninstall. Preview images expire after 14 days, with a default cache budget of 50 MB; pruning runs during use and startup. Favicons are limited to 512 cached entries. The action journal retains the latest 20 completed records; unfinished operations remain for recovery. Closed-page records are limited to 1,000 entries or 30 days. Collection versions are limited to 200 entries or 30 days. These are pruning limits, not a guarantee that an idle browser immediately deletes expired data. Browser-managed recent sessions follow the browser's own retention rules.

Your choices and deletion

Edit or delete collections in the library and export a copy through Export & import. Settings → Privacy & permissions lets you clear previews and revoke optional website, history and bookmark access. Revoking access does not delete existing caches or remote exports. Disable automatic previews in Settings. Forget each saved AI key and the Notion token in their connection settings; revoking a token at its provider also invalidates it. Core features remain usable without these connections.

Uninstalling LeoTabs removes its local extension data. Export anything you wish to keep first. Uninstalling does not delete downloaded files, clipboard copies, browser bookmarks or information already sent to an external service. Delete those copies through the relevant app or provider. The developer cannot retrieve or delete a library held only in your browser.

Support and the website

If you email support, the developer and the email service process your address, message and any attachments to respond and resolve the issue. Send only the information needed; avoid passwords, API keys or a complete browsing backup. Support correspondence is kept only as needed to handle the request and meet applicable obligations. You can request access, correction or deletion through the contact address above.

The LeoTabs website contains no analytics scripts, advertising, tracking cookies or third-party embeds. It stores your light or dark theme choice locally in your browser; this preference is not sent to the developer. Choosing System removes the saved preference. The website is hosted by GitHub Pages. GitHub receives network requests and logs visitors' IP addresses for security purposes. See the GitHub Privacy Statement for its handling of this information. Visiting external links is subject to the destination's policies.

Limited use and future paid features

LeoTabs uses browsing information only to provide the features described here, in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. LeoTabs does not sell browsing data, use it for advertising or credit decisions, or send it to the developer for unrelated purposes. The developer only sees user content that you choose to send for support; external connections process the content needed for the feature you enable.

LeoTabs is currently free, with no paid LeoTabs plan. Optional third-party APIs may charge you separately. This is an independent project, not a claim of registered nonprofit status. Future optional features requiring servers, such as transfer or hosted backup, may have paid plans to cover development, maintenance and server costs and may generate profit. These services are not implemented or enabled by this policy. Their pricing, data handling and any necessary consent will be explained before launch; no current library is automatically enrolled.

Changes

This policy will be updated when the product's data handling changes, with a new date above. Material changes will also be explained in the extension or release notes, and consent will be requested where required before new handling begins.