Privacy at Tabloom
Your saved links are yours. Tabloom uses the minimum browser access needed to organize tabs and does not sell personal data or use it for advertising.
What we store
Your Google account identifier, spaces, collections, saved-link titles, URLs, notes, favicon addresses, and ordering. Authentication and database records are handled by Supabase.
Browser permissions
The extension uses tabs access for the current-tabs sheet, storage for cached workspace data and sign-in state, and identity for Google OAuth. Bookmark access is optional and requested only when you choose to import bookmarks. Unsupported internal browser pages are never saved.
Bookmark import
When you choose to import, Tabloom copies visible bookmark titles, URLs, and folder organization into ordinary editable collections. Your browser bookmarks remain unchanged. Imported links stay local unless you sign in and enable workspace synchronization.
Sharing and control
Collection sharing is off by default. Anyone with an enabled share URL can view that collection without signing in, and future synced edits appear when they reload. Shared snapshots contain the collection name and its saved cards, but not your account identity, space name, device details, or sync state. Regenerating or disabling a link revokes the previous URL immediately. You can also edit or delete saved links and collections at any time.
This project ships as a self-hostable v1. Before public commercial operation, the operator should add contact details, jurisdiction-specific disclosures, and a formal account-deletion request channel.