Optional Pro billing
When a user chooses a Pro billing, trial, login, subscription-management, or verification action, Tab Harbor connects to ExtensionPay and Stripe. Those services may process the user's email address, authentication status, subscription status, payment information, transaction history, and limited technical information needed to provide and verify the subscription. Tab Harbor does not receive or store a complete payment-card number.
Optional encrypted cloud sync
Encrypted cloud sync is user-initiated and available only to verified Pro users. When a user signs in, Tab Harbor sends the supplied email address and authentication information to the project's Supabase service. Before upload, saved session and schedule data—including tab titles, website addresses, and group information—is compressed and encrypted locally with a passphrase chosen by the user. The passphrase is not stored or transmitted. Supabase receives the encrypted vault, encryption metadata, a random device identifier, account identifiers, and limited technical information needed to operate and protect the service.
Tab Harbor's server verifies Pro access with ExtensionPay for every cloud read and write. It records a limited entitlement audit containing the account identifier, provider email, plan, subscription status, plan name, and verification time. It does not store the ExtensionPay installation key.
Control and deletion
Free local features remain available without enabling billing or cloud-sync data transmission. Firefox users are asked for the applicable optional data permissions when they choose an online Pro action and may revoke those permissions in Firefox's add-on settings. Users may sign out of cloud sync from the Session Manager.
Requests concerning cloud-account or encrypted-vault deletion may be sent to drchapman42@gmail.com.
Security and retention
Network connections use HTTPS. Cloud vault contents are encrypted locally with AES-256-GCM using a key derived from the user's passphrase. The user is responsible for keeping that passphrase safe because Tab Harbor cannot recover it. Data is retained only as needed to provide the selected service, meet security and legal obligations, and maintain subscription records handled by the relevant service providers.
Service providers
- Supabase: cloud authentication, encrypted-vault storage, and server-side entitlement enforcement
- ExtensionPay: subscription and trial management
- Stripe: payment processing
Each provider processes information under its own terms and privacy policy.
Changes
Material changes to this policy will be disclosed through the extension listing or product interface before newly covered personal data is transmitted.
Contact
Privacy questions and requests may be sent to drchapman42@gmail.com.