Privacy policy

Effective 13 October 2026

Tabfold is a Chrome extension that folds your open tabs into one list and finds them again. It’s made by Truewidgets, a division of Loom Factor Ltd (“we”). This page says what Tabfold keeps, where it keeps it, who else handles it, and how to delete it.

Using Tabfold for free

When you fold tabs, Tabfold keeps, for each tab: its address, its title, the link to its icon, whether it was pinned, its tab group’s name and colour, the keywords you gave it, which window it was in and when it was folded. It also keeps your folders (their names, colours, stars and notes), your window names, your settings, a weekly count of what you folded, and recent snapshots of your open windows so it can bring your tabs back after a crash.

All of this stays on your computer, in Chrome’s storage for the extension. Free has no account. Tabfold doesn’t send any of it to us, and makes no network requests of its own, with one exception: when you press “Save to my Tabfold” on a folder someone shared with you, Tabfold reads that folder from Tabfold’s server, without sending anything about you.

After a fold, Tabfold reads how much free memory your computer has (Chrome’s system.memory), to show what folding freed. That number stays on your computer.

Chrome sync

So your list shows up on your other computers, Tabfold puts your newest folded tabs (about 500) in Chrome’s own sync storage. For each of them it shares the address, the title (cut to 120 characters), when it was folded, its keywords, its folder, and its snooze time with a random id for the computer that snoozed it. It also shares your folders (names, colours, stars and notes), the sites you moved to another kind of site, and a short list of tabs you removed, so they go on your other computers too.

This goes through your own Chrome sync, like your bookmarks and settings, and only reaches computers signed in to Chrome with the same Google account. Google handles it under its own privacy policy; we can’t see it. Older folded tabs, tab groups, icons, snapshots, and tabs folded from Incognito windows are never shared.

Chrome sync is on unless you turn it off: Settings › “Sync folded tabs with Chrome”, or in Chrome’s own sync settings.

Your Tabfold account (Pro, Pro AI, Pro for life, Teams)

The paid plans use a Tabfold account and Tabfold’s server, which runs on Supabase (supabase.com) in the United Kingdom (London). Nothing in this section happens until you sign in, start the trial or pay.

Your email and signing in

Your account is your email address. There’s no password: to sign in or start the 7-day trial, you type your email and we email you a 6-digit code. The server keeps the code only in a scrambled form (a keyed hash), for 10 minutes and 5 tries, and deletes it once used. Each computer makes a random device token, and once you sign in, a random profile key goes in your Chrome sync so your other computers on the same Chrome profile sign themselves in. The server keeps only fingerprints of these (SHA-256 hashes), never the token or key itself, and when each computer was last seen.

Your folded tabs

With a paid plan, Tabfold syncs your folded tabs through your account instead of Chrome sync, so every folded tab reaches your other computers. For each tab it sends the address, the title (cut to 200 characters), when it was folded, its keywords, its folder and snooze time; and your folders (names, colours, stars and notes), the sites you moved, and the tabs you removed. Icons, tab groups, windows, snapshots and Incognito tabs are never sent.

Once a day the server keeps a backup copy of what’s synced, for 30 days; older backups are deleted automatically. When a plan ends, your synced copy stays in your account, so it’s there if you come back, until you delete your account.

What else the server keeps

• When your trial started, and when you first proved your email with a code.
• If your email had the 7-day trial, a fingerprint of it: a one-way code made from the address with a secret key (HMAC-SHA256). The address can’t be worked back out of it. It’s how we make sure each email gets the trial once, so it stays even after you delete your account.
• How many AI requests your account made each month.
• Your plan as Stripe last described it: Stripe’s ids for you, your subscriptions and a Pro for life payment, the plan, its status, seats and dates.
• Short-lived counters that stop floods (codes asked for, checkouts started, visits to shared pages), for at most a day. Each is filed under a fingerprint of the email, computer or IP address made with a secret key (HMAC-SHA256), never the email or address itself, so it can’t be turned back into one.

The server’s own logs record errors only, never your tokens, codes or tab titles. Supabase also keeps short technical logs of requests (which can include your IP address) to run and protect its service.

Payments

Payments go through Stripe (stripe.com). Paying happens on Stripe’s own page, opened in a tab, and changing your plan or card, invoices and cancelling are on Stripe’s billing page. You type your card into Stripe, never into Tabfold, and we never see your card number. Stripe keeps your payment details and the records of your payments under its own privacy policy. Stripe tells our server your email, which plan you bought and its status.

Email

Sign-in codes and team invitations are sent from our mailbox at Zoho Mail (zoho.com), which therefore gets the address each email goes to and what it says (a code, or who invited you to which team), and keeps a copy of each email sent, as any email account does. We don’t send newsletters or marketing email.

The AI features (Pro AI)

Organise with AI, smart names for folds, Copy as context, Ask your tabs and the weekly tidy-up use Claude, a model by Anthropic (anthropic.com). For these, Tabfold sends your tabs’ titles (cut to 200 characters) and sites (like github.com, never full addresses), at most 300 tabs at a time, to Tabfold’s server, which asks Anthropic. The weekly tidy-up also sends your folder names, Copy as context the group’s name, and Ask your tabs the question you typed.

Some of this happens without a click: with Pro AI, each fold’s tabs are sent to get its smart name, and on Mondays the tidy-up looks at tabs you haven’t opened in a month (Settings › “Weekly tidy-up” turns it off).

Tabfold never sends the content of pages, and never tabs folded from Incognito windows. Our server doesn’t keep what it sends or gets back, only the count of requests. Anthropic handles the request under its commercial terms, which say it doesn’t train its models on it.

Shared folders

When you share a folder (Pro), its name, colour, note and its pages’ titles and addresses go to Tabfold’s server and appear on a public page at a link. Anyone with the link can see them until you stop sharing, and can save a copy into their own Tabfold; their copy is theirs. The server counts how many times the page was opened. Tabs folded from Incognito windows are never shared.

The shared page is on this site, which Vercel (vercel.com) hosts. It loads the folder from Tabfold’s server, sets no cookies and runs no analytics.

Teams

On a Teams plan, the owner invites people by email. Everyone in the team sees the team’s name, its members’ and invitees’ email addresses, and the team folders, with who added each tab (by email). Team folders are kept on Tabfold’s server for the team, without daily backups, while its plan is on. When the plan ends they stay readable for 30 days, so people can keep a copy, and then they’re deleted (sooner if the team’s owner deletes their account). Whoever leaves or is removed can keep a copy of the team folders on their computer.

What Tabfold never does

• It never reads, collects or changes what’s on web pages. It has no permission to access websites and runs no scripts in them.
• It has no ads, no analytics and no trackers, and it never loads code from the internet.
• We never sell your data, share it for advertising, or use it for anything but running Tabfold.

Who handles your data

These providers handle data on our behalf, and may do so in the United States and other countries.

Deleting your data

• One tab: × in the list.
• Your tabs on a computer: Settings › “Clear everything” removes your folded tabs, folders, snapshots, window names, weekly numbers and the other lists Tabfold keeps on that computer, puts the settings back to their defaults, and removes Tabfold’s copy in Chrome sync. With a paid plan it also empties your account’s synced copy; its backups are then deleted within 30 days. You stay signed in. Removing Tabfold (below) deletes everything it kept on that computer.
• Your account: Settings › “Delete my Tabfold account…”, after typing your email. Your subscriptions are cancelled at once, with no further charges. Your account, synced tabs, backups, shared links (they stop working), AI counts and a Pro for life purchase are deleted, and every computer is signed out: your other computers find out at their next plan check and stop contacting Tabfold’s server. A team you own ends for everyone in it; a team you’re in carries on without you. The folded tabs on your computers stay there.
• Removing Tabfold: Chrome deletes what Tabfold kept on that computer. Settings › “Remove Tabfold…” first offers to reopen your tabs, save them to Chrome bookmarks or download them. To remove the copy in Chrome sync too, use “Clear everything” first.

What stays after you delete your account:

• If you had the trial, the fingerprint of your email (above), so the trial can’t be started again with it.
• Tabs you added to the folders of a team you were in keep your email as who added them, in that team’s folders, until someone in the team removes them or the team’s folders are deleted (30 days after its plan ends, or when its owner deletes their account). A team’s folders are stored as its members’ computers send them, and our server can’t edit them.
• Stripe’s records of your payments, as payment and tax rules require.
• The copies of the emails we sent, in our Zoho mailbox, and our hosting providers’ short-lived logs.
• Invitations someone else sent to your email, on their team’s list until they cancel them.
• Copies other people saved from your shared folders or kept from a team, which are theirs.

Your rights

You can see and export what Tabfold keeps (Settings › Export…), correct or delete it as above, and ask us anything about it. Where the law gives you more rights, such as in the EU and UK, you can use them by writing to us, and complain to your data protection authority. We use your data to give you the service you asked for, to keep it safe, and to keep the records the law requires.

Children

Tabfold isn’t meant for children under 13, and we don’t knowingly keep their data.

Changes

If what Tabfold keeps or shares changes, we’ll update this page first, with a new date at the top.

Contact

Questions, or a request about your data: hello@truewidgets.com.