Your bookmarks are local first.

Scope

This Privacy Policy applies to the Tabpia website, account services, and Tabpia extensions for Chrome, Microsoft Edge, and Firefox. Tabpia is operated by Qiu LiYun, an individual; “Tabpia,” “we,” and “our” refer to that operator.

Websites, search engines, browser stores, payment providers, and other services you open or select have their own privacy practices. This policy does not control those third parties.

Information we handle

Local extension data

Without signing in, Tabpia stores your workspaces, bookmarks, bookmark URLs and titles, workspace mappings, favorites, pinned state, usage counters, layout choices, language, search-engine settings, wallpaper settings, favicons, screenshots, and custom images in browser-managed local storage. This data remains on that browser unless you export it, send a request to a third-party feature described below, or later sign in and enable cloud functionality.

Account information

When you register, we process your email address, optional display name, password hash, email-verification and password-reset records, account status, plan and entitlement state, login timestamps, and IP addresses used for login security and abuse prevention. We never store your plaintext password.

Google sign-in

If you choose Google sign-in, we receive the Google account identifier, verified email address, display name, and profile image made available by Google for authentication. Tabpia may copy that profile image to its own storage so the account avatar does not depend on a live Google image URL.

Optional cloud sync

For an eligible signed-in account, cloud sync can store workspaces; bookmarks and their URLs, titles, domains, sorting and usage fields; workspace mappings; extension settings; favicons; page screenshots; custom bookmark images; and an uploaded custom wallpaper. Sync revision and device authorization records are used to keep multiple browsers consistent and protect account access.

Billing and support

If you purchase Pro, Tabpia stores order and subscription details such as provider, plan, amount, currency, status, renewal period, and provider transaction, customer, and subscription identifiers. Payment credentials are entered with the selected payment provider; Tabpia does not intentionally collect or store full payment-card numbers. A support request includes your account identity, email, subject, message, and delivery log.

Feature-specific processing

Quick Save and page capture

Quick Save reads the active page title, address, and available icon so you can create a bookmark. A page screenshot is captured only after you choose a capture option and grant any permission requested by the browser. Screenshots and uploaded images are kept locally unless cloud sync uploads them for your account.

Search

Tabpia bookmark search runs against the extension’s bookmark data. When you choose an external search engine, your query is sent directly to that provider through the search URL shown in your settings. Custom search engines are controlled by the URLs you configure.

Website icons

To find a bookmark icon, the extension or Tabpia server may request an icon from Google’s favicon service, favicon.im, or the bookmarked website itself (for example, its favicon or logo path). The requested website domain—and technical request data such as IP address when a direct network request is made—may therefore be visible to the responding service. The resulting image may be cached locally or, for cloud users, stored with the bookmark.

Public libraries

If you browse Tabpia’s public bookmark, wallpaper, or search-engine libraries, Tabpia serves those catalog items and may count an item when you copy it. These aggregate catalog counts do not change the private ownership of your account data.

How we use information

• Provide local bookmark organization, account access, cloud sync, media storage, backup-related functions, billing, and support.
• Authenticate users and extension devices, reconcile subscription access, prevent abuse, and investigate errors or security events.
• Send transactional messages such as verification, password reset, welcome, billing, subscription, and support emails.
• Maintain service reliability and understand aggregate account, subscription, revenue, and public-library usage.
• Comply with law, enforce our Terms, and protect users, Tabpia, and the public.

We do not use private bookmark content, screenshots, custom images, or search activity to build advertising profiles.

Sharing and service providers

We disclose information only as needed to operate a feature you request, process a purchase, secure the service, comply with law, or complete a business transaction subject to appropriate protections. Depending on the feature, recipients may include:

• Google for optional Google sign-in and Google favicon requests;
• PayPal, Creem, or Paddle when you select that payment provider;
• hosting, storage, and transactional-email providers used to operate Tabpia;
• favicon.im, a selected search engine, or a bookmarked website when your browser or Tabpia requests the related resource; and
• Chrome Web Store, Microsoft Edge Add-ons, or Mozilla Add-ons for extension distribution under each store’s own policies.

No sale or targeted advertising. Tabpia does not sell personal information or transfer it to data brokers, advertisers, or credit-scoring services.

Chrome Limited Use. Tabpia’s use and transfer of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention and deletion

Local extension data remains until you delete it, clear browser storage, remove the extension, or restore a different backup. Cloud data remains while your account is active or as needed to provide the service. Deleting a synced bookmark also queues deletion of its associated cloud screenshot or custom image and removes matching cached media on connected devices after synchronization.

You may delete local items in the extension and revoke an extension connection. To request permanent deletion of your Tabpia account and private server-side resources, contact us through the Contact page or support email below. We may retain narrowly limited records where required by law, necessary to resolve disputes, prevent fraud, or document a completed deletion; payment providers may retain their own records under their policies and legal duties.

Security, choices, and international processing

Tabpia uses safeguards including encrypted HTTPS transport, password hashing, protected session cookies, scoped extension-device tokens, access checks, and validation of uploaded images. No storage or transmission method is completely secure, so we cannot promise absolute security.

You can use Tabpia locally without an account; choose whether to register or sign in; choose whether to capture or upload images; edit or delete local content; export and restore local data; select search providers; revoke extension access; cancel a paid subscription through available billing controls; and request access, correction, export, or deletion of account data by contacting us.

Tabpia and its providers may process information in countries other than yours. Where applicable, we rely on lawful transfer mechanisms and provider safeguards. Depending on your location, privacy law may provide additional rights, including the right to complain to a supervisory authority.

Children and policy changes

Tabpia is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher minimum age may apply where local law requires it. If you believe a child provided personal information, please contact us.

We may update this policy when Tabpia changes or legal requirements evolve. We will update the date above and provide additional notice when a material change requires it. Continued use after an effective update is subject to the revised policy, while any consent required by law will be requested separately.