Tab Sync

Privacy

Privacy Policy

Effective 11 September 2026

Tab Sync is a browser extension and web app that lets you view open tabs and navigation history from your connected browsers. This policy explains the information the service handles and why.

Information Tab Sync handles

How Tab Sync uses this information

Tab Sync uses this information only to authenticate you, associate a browser installation with your account, and show your open tabs and navigation history on your other signed-in Tab Sync clients. It does not sell data, use it for advertising, create advertising profiles, or allow people to read it except when needed to provide support you request or when legally required.

Where information is sent and stored

The extension sends the information above to the Tab Sync server you configure. The default server is tabsync.nkson.com. You may instead configure your own server. Use HTTPS for every non-local server. The extension keeps its token, configuration, installation identifier, sync status, and a short pending queue of unsent navigation events in browser extension storage. The selected Tab Sync server stores account, device, open-tab, and navigation information so it can provide the sync service.

What Tab Sync does not collect

Tab Sync does not read page contents, form entries, passwords typed into websites, cookies, downloads, bookmarks, private or incognito tabs, or your browser's pre-existing global history. It observes eligible HTTP(S) navigation only after installation and sign-in. It does not use analytics, advertising, trackers, or remote code.

Retention and your choices

The default Tab Sync server deletes navigation history after 90 days. A self-hosted server may use a different retention period chosen by its operator. You can sign out from a Tab Sync client to revoke that client session. You can remove a device from the dashboard to delete that device and its stored tabs and history, and sign its browser extension out. Uninstalling the extension removes its browser-local extension storage; removal of server-stored data is controlled through the dashboard or the server operator.

Security

Use HTTPS for the hosted service and every remote self-hosted server. Passwords are not retained by the extension after authentication. The default server stores password verifiers rather than plaintext passwords and stores session tokens in hashed form.

Contact

For privacy questions, contact tabsync@nkson.com.