TabHerdAI privacy policy

Effective October 26, 2026. This version adds the website, the tabherdai.com domain, and the rights you have under the GDPR, UK GDPR and US state privacy laws. Previous version.

This policy covers three things: the TabHerdAI Chrome extension, the TabHerdAI Plus service that powers its built-in AI, and the tabherdai.com website. It explains what data each one handles, where that data goes, how long it is kept, and what control you have.

In short: everything TabHerdAI knows about your tabs stays in your own browser. Tab information leaves your computer only when you turn on an AI feature and tick a box agreeing to send it, and then only to the AI service you chose. Our server stores hashes, not keys or content. The website uses no cookies and no third-party trackers. We do not sell, share, rent or trade personal data, and we do not use it for advertising.

1. Who we are

TabHerdAI is made and operated by Mark Morrison ("we", "us"). We are the data controller for the Plus service and the website. For the extension itself, the data stays on your device and we never receive it.

Contact for anything in this policy, including privacy requests: morrisonwmark@gmail.com. We answer within 30 days, or sooner where the law requires it.

2. The extension: data kept in your browser

TabHerdAI stores the following in Chrome's extension storage on your device. None of it is sent to us.

• Your tabs and boxes: titles, addresses, which tab opened which, and tab groups.
• Your archive and trash: the titles, addresses and notes of tabs you archive or close. Closed tabs stay in the trash for 30 days, then are deleted.
• Page notes: short AI-written summaries of pages, kept while the page is open, archived or in the trash.
• Usage times: when you first saw a page, when you last used it, how many times you visited, and how long it was the active tab (capped at 30 minutes per stretch). TabHerdAI also records when you created each box and counts open tabs each hour.
• History: a log of the changes TabHerdAI made, so you can undo them.
• Totals: counts of tabs closed and archived, with estimates of memory and time saved.
• Settings: including any API keys and the license or trial key you enter.

Uninstalling TabHerdAI deletes all of this. You can also export, import and clear the archive from Settings.

3. The extension: data sent to an AI service

TabHerdAI sends data off your device only when an AI feature is turned on and set up, and, for Plus and your own API key, only after you tick the box agreeing to send tab information. Until then, nothing is sent and the extension works on local rules alone.

When you use an AI feature, TabHerdAI sends:

• tab titles and addresses, how long ago each tab was used, and the names of their tab groups;
• page text, but only if you turned on page reading, which Chrome asks you to allow separately;
• what you type in the Ask tab.

Where it goes depends on the mode you pick:

• TabHerdAI Plus: to our server (a Cloudflare Worker), which forwards the request to Google's Gemini API and returns the answer. Our server does not store or log the content of requests or answers. We use the paid Gemini API, under the Gemini API terms, where Google does not use your requests to train its models.
• Your own API key: directly from your browser to the provider you chose (Google, Anthropic, OpenAI, OpenRouter, Groq, Mistral, DeepSeek, xAI, Together, or an OpenAI-compatible endpoint you enter), under that provider's terms and privacy policy. We never see this data or your key.
• Local model (Ollama): to the Ollama address you enter. If that is your own computer or network, nothing leaves your machines.

4. TabHerdAI Plus: what our server stores

The Plus server keeps the minimum it needs to check that a key is valid and to meter use. Specifically:

The install ID is random and is not linked to your name, email or Google account. The IP hash cannot be turned back into your IP address without a secret key that only the server holds, and it is used only to count trials per network.

Checking a license sends the key to our server, which checks it with Lemon Squeezy. Starting a trial sends the install ID.

5. Payments

TabHerdAI Plus is sold by Lemon Squeezy, which acts as the merchant of record. Lemon Squeezy collects your payment and billing details, handles taxes and refunds, and sends you the license key, all under the Lemon Squeezy privacy policy. We receive your order details and email address from Lemon Squeezy so we can support you. We never receive your card details.

6. The website (tabherdai.com)

The website is a static site hosted on Cloudflare Pages.

• No cookies, no third-party trackers. The site sets no cookies and loads no scripts, fonts or embeds from advertising or analytics companies. The video on the page is served from our own site.
• First-party counts only. When a page loads, and when the install button is clicked, your browser sends a small request to our site that records: the page path, the campaign source in the link you followed (for example /go/reddit), the domain of the site that referred you, the country Cloudflare derives from your connection, and the day. These are stored as daily totals. We do not store your IP address, a device or user identifier, your full browser details, or anything that would let us recognise you on a later visit.
• Ad click identifiers. If you arrive from an ad, the link may carry an identifier added by the ad platform (such as gclid or fbclid). Our site does not read, store or forward it.
• Cloudflare Web Analytics. If enabled, Cloudflare's privacy-first analytics may also measure page views. It uses no cookies and no client-side state, and does not fingerprint visitors; see Cloudflare's description.
• Hosting. Cloudflare processes your IP address to deliver the site and protect it from abuse, under its own privacy policy. We do not receive or keep access logs.
• The Chrome Web Store. The install button takes you to Google's Chrome Web Store, which has its own privacy policy. We add a utm_source tag to the link so we can see which campaign installs came from, in aggregate, through Google's developer dashboard.

7. Chrome Web Store user data

TabHerdAI's use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements:

• Data is used only to provide TabHerdAI's tab-organizing features.
• It is not sold, and it is not used for advertising, credit decisions or anything unrelated to those features.
• It is not transferred to anyone except the AI provider you choose, as described in section 3.
• People do not read it, except where you share it yourself when asking us for support.

8. Legal bases (EU, EEA, UK and Switzerland)

Where the GDPR, the UK GDPR or Swiss law applies, we rely on:

• Performance of a contract (Art. 6(1)(b)): checking your license or trial and metering use, so we can provide Plus.
• Consent (Art. 6(1)(a)): sending tab information and page text to an AI service. You give it by ticking the box in Settings and can withdraw it there at any time; withdrawing it stops further sending but does not affect what was sent before.
• Legitimate interests (Art. 6(1)(f)): limiting trials per network to prevent abuse, keeping the service secure, and counting website visits in aggregate so we can see whether our advertising works. You can object at any time (section 10).

We do not use personal data for automated decisions that have legal or similarly significant effects on you.

9. International transfers

We are based in the United States. Our providers are Cloudflare (hosting, global network), Google (Gemini API) and Lemon Squeezy (payments), which are based in or process data in the United States. Where data about people in the EU, EEA, UK or Switzerland is transferred, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (and the UK Addendum). You can ask us for details of the safeguards in place.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong;
• delete your data;
• restrict or object to processing, including processing based on legitimate interests;
• port data you gave us to another service;
• withdraw consent at any time, without affecting what was done before;
• not be discriminated against for exercising these rights.

How to exercise them: email morrisonwmark@gmail.com. Because our server stores only hashes, we will ask you for your license key, trial token or install ID (shown in Settings → AI) so we can find the matching records; without one of these we cannot link any record to you. We may also ask for enough information to confirm the request is genuinely yours. We will reply within one month (EU/UK) or 45 days (US states), and will tell you if we need longer. You can use an authorised agent where your law allows it; we will ask the agent for proof of your authorisation.

Appeals. If we refuse a request and you live in a US state whose law provides for it (for example Colorado, Connecticut, Virginia, Texas or Oregon), reply to our decision with "appeal" in the subject line and we will review it again, by a different reviewer where possible, within 45 days. If you still disagree, you can contact your state attorney general.

Complaints. You can complain to a supervisory authority. In the EU that is the authority of your country (list); in the UK, the ICO; in Switzerland, the FDPIC. We would appreciate the chance to resolve things first.

California residents

The California Consumer Privacy Act (as amended by the CPRA) gives you rights to know, delete and correct personal information, and to opt out of its sale or sharing. In the preceding 12 months we have collected these categories: identifiers (a hashed license key or trial token, a random install ID, a hashed IP address, and the email address Lemon Squeezy sends us with an order); commercial information (order and subscription status); and internet activity (aggregate website counts, and, for the AI features and only with your consent, tab titles and addresses, which are forwarded to the AI provider and not stored by us). We collect them from you, from your browser, and from Lemon Squeezy, for the purposes in sections 3 to 6. We disclose them only to the service providers named in this policy, under contracts that restrict their use. We do not sell or share personal information as those terms are defined in California law, we have not done so in the preceding 12 months, and we do not knowingly collect or sell the personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes that would require a right to limit. Because we do not sell or share, we do not offer a "Do Not Sell or Share" link; we treat a Global Privacy Control signal as an opt-out request in any case. California's "Shine the Light" law: we do not disclose personal information to third parties for their direct marketing. Do Not Track: our site does not track you across other sites, so a Do Not Track signal changes nothing; we honour Global Privacy Control as described above.

Other US states

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia have similar rights to access, correct, delete and port their data, and to opt out of targeted advertising, sales and profiling. We do none of those three. The request and appeal routes above apply. Nevada residents: we do not sell covered information.

Canada, Brazil, Australia and elsewhere

If you live in Canada (PIPEDA), Brazil (LGPD), Australia (Privacy Act) or another country with a privacy law, you can exercise the rights that law gives you by the same route, and you can complain to your national privacy regulator.

11. Retention summary

• In your browser: until you delete it or uninstall; trash empties after 30 days.
• Plus server: license cache 60 days after last use; usage counters about 30–60 days; trial records 90 days after the trial ends. A nightly job deletes expired rows.
• Lemon Squeezy order emails we receive: for as long as you have a subscription, then up to 7 years where tax or accounting law requires it.
• Website counts: daily totals for 13 months. They contain no personal data.
• Support emails: 2 years after the last message, then deleted.

12. Security

Requests to the Plus server and the website use HTTPS. The server stores hashes rather than keys and IP addresses, holds its secrets outside the code, and only accepts requests that carry a valid license or trial key. The AI providers each hold their own security certifications. No system is perfectly secure, so if you believe your data has been exposed, contact us and we will investigate and notify you and any regulator as the law requires.

13. Children

TabHerdAI is not directed at children. We do not knowingly collect personal data from anyone under 13 (or under 16 where that is the age of consent, including in parts of the EU). If you believe a child has given us personal data, contact us and we will delete it.

14. Changes

If this policy changes, the date at the top changes too, and the previous version stays linked. Material changes to how we use data that we already hold will be announced in the extension's release notes and, where we have your email from an order, by email, before they take effect.

15. Contact

Mark Morrison, maker of TabHerdAI Email: morrisonwmark@gmail.com Website: https://tabherdai.com