Tabcom

Privacy Policy

Last updated: July 12, 2026

Tabcom is a browser extension that lets a small group of people communicate directly on top of the webpages they're viewing together — live cursors, pins and annotations on page content, chat, and voice/video calls. This page explains exactly what data that requires, what we store, what we never store, and why.

Information we store

Category	What, and why
Account information	Email address, chosen username, display name, avatar color, and an optional profile photo — collected when you create an account, used to identify you to your communities and to sign you in.
Authentication	We use passwordless sign-in: a one-time link is emailed to you, and a session token authenticates your device afterward for up to 90 days. We never see or store a password. Session tokens are stored hashed, not in plain text.
Guest sessions	Using Tabcom without an account creates a temporary guest identity that lasts 30 minutes. When it ends — by your choice or by timing out — the guest's session record and their personal activity log are deleted outright, not just marked inactive.
Shared boards	When you or a community member pins a page, adds a tab, or annotates content, we store that page's URL, title, a thumbnail image, and the annotation/comment text itself, tied to the community that added it. This is what makes those pins and comments visible to your teammates and persistent across sessions.
Community membership & settings	Which communities you belong to, your role, and your app preferences (theme, notification, and similar settings), so they carry over across devices and sign-ins.
Invitations	Tabcom is currently invite-only. We store invite codes and which account redeemed which code, to enforce single-use codes.

Information we deliberately do not store

The following data passes through our server in real time so it can reach the other person or people you're communicating with — but it is never written to a database, file, or log, and is discarded the moment it's been relayed:

• Chat messages — delivered live between community members; not persisted server-side.
• Live cursor position — your on-page cursor location is relayed to teammates viewing the same page so they can see where you're looking, and is held in memory only for that instant, never written anywhere.
• Voice and video call audio/video — calls are connected peer-to-peer where possible; call signaling passes through our relay but call content is never recorded or stored by Tabcom.

What we don't collect

• We do not collect health information, financial or payment information, or precise location/GPS data.
• We do not track your browsing history outside of pages you or your community members explicitly pin or annotate.
• We do not run analytics or advertising trackers inside the extension.

How we use your information

We use the information above only to operate Tabcom's core features:

• Authenticating you and keeping your session signed in.
• Displaying your profile, boards, pins, and communities to the people you share them with.
• Sending you a magic-link sign-in email or an account verification email, via our transactional email provider, Resend. Resend only receives your email address and the content of that one email — never your messages, boards, or browsing activity.
• Enforcing invite-only registration.

We do not use your data for advertising, profiling, or any purpose unrelated to these core features, and we do not use it to make creditworthiness or lending decisions.

Sharing your information

We do not sell or rent your data to anyone. We share data only with the infrastructure providers that make Tabcom work:

• Neon (PostgreSQL database hosting) — stores the account, board, and community data described above.
• Render (application hosting) — runs our server; may retain standard infrastructure-level access/error logs briefly for operational purposes, separate from the application data described in this policy.
• Resend (transactional email) — sends sign-in and verification emails on our behalf.

Your data is visible to the other members of any community you join — that's the point of a shared board — but never outside your communities, and never to us for any purpose beyond running the service.

Data retention and deletion

• Registered account sessions last 90 days and can be ended at any time from Settings → Sign out.
• Guest sessions last 30 minutes and are fully deleted — session record and personal activity log — when they end.
• Deleting your account permanently removes your user record and every session tied to it. Your account's invite codes are removed with it. Board items you contributed to a shared community (pins, tabs) remain visible to that community, attributed to your username, the same way any shared document keeps a departed collaborator's past contributions.

Your choices

• You can use Tabcom as a guest with no account and no email address at all, for a 30-minute session.
• You can delete your account at any time from Settings, which removes your account and its data as described above.
• You can turn off Tabcom's permissions or remove the extension at any time from your browser's extension settings.

Children's privacy

Tabcom is not directed at children and we do not knowingly collect information from anyone under 13.

Changes to this policy

If we make a material change to how Tabcom handles your data, we'll update the date at the top of this page and, where appropriate, notify active account holders.

Contact

Questions about this policy or your data can be sent to privacy@tabcom.dev.