Privacy Policy

Last Updated: June 22, 2026

ReadyTab is a browser extension that replaces your new-tab page with a productivity dashboard. This policy explains what data exists, where it lives, and what we can and cannot access.

1. Data Collection

What ReadyTab stores — locally, on your device

All data is stored exclusively in your browser using chrome.storage.local:

• Workspace configurations (groups, links, layouts)
• Theme preferences and appearance settings
• Custom background images
• Your Pro license key (if applicable)

We do not collect your email address in the extension. No separate account is required. ReadyTab works entirely offline by default — nothing is sent anywhere unless you explicitly use an optional networked feature such as cloud sync, snapshot sharing, managed boards, or link health checks.

What we cannot see

We have no access to your workspace data. Specifically:

• Password-protected workspaces are encrypted locally with AES-256-GCM using your password before anything is stored or synced. We never receive the plaintext content and have no way to decrypt it — not even us.
• Standard workspace data never leaves your device unless you choose to use cloud sync or another optional networked feature.
• We do not track your browsing, record which links you click, or monitor usage patterns.

Cloud sync (Pro — optional)

Cloud sync is available as an optional Pro feature. It does not require an email address or separate account creation. Your license key is used together with a backend user ID to identify your encrypted sync data.

If you use cloud sync, your workspace data is encrypted client-side before upload and transmitted over HTTPS. Our backend stores encrypted blobs needed to sync your dashboards across devices. We do not read the plaintext contents of your synced workspace data.

Snapshot sharing and managed boards (Pro — optional)

If you use snapshot sharing, ReadyTab sends an encrypted workspace snapshot to the backend and receives a share code used to import that snapshot elsewhere as a local copy.

If you use managed boards, ReadyTab communicates with the backend to publish, subscribe to, sync, and manage board payloads. Managed board payloads are transmitted over HTTPS, and password-protected boards use encrypted blobs that we do not read in plaintext.

Publishing a board (a snapshot share or a public board) makes its encrypted snapshot retrievable by anyone who has the link: the decryption key is contained in the link itself (in its URL fragment) and is never sent to our backend, so our server only ever holds the encrypted copy. Treat a published board as public — anyone who has the link can view its contents.

By default a published board expires automatically 30 days after it is created or last extended; you can instead keep it permanently, extend it by a further 30 days, or delete it at any time from the extension, which removes it from our backend so the link no longer resolves. We do not control, endorse, or verify the content of user-published boards, and we remove published boards in response to valid takedown or abuse reports — every published board page includes a report link for this purpose.

Link health checks (Pro — optional)

Link health checks are off by default. If you turn them on, ReadyTab periodically sends network requests to your saved HTTP/HTTPS links in order to detect unreachable links and show their status in the UI.

2. Third-Party Services

LemonSqueezy (Payment & Licensing)

Pro purchases are handled by LemonSqueezy, who acts as the Merchant of Record. LemonSqueezy collects your email address and payment information for the purpose of processing your order and sending your receipt — this is their data collection, not ours. ReadyTab receives licensing data such as your license key. See LemonSqueezy's Privacy Policy.

3. Data Retention

• Local data — Stored in your browser until you uninstall the extension or clear browser storage
• Cloud sync data — Retained until you request deletion; removed within 30 days of request
• Published & shared boards — A published board expires automatically 30 days after it is created or last extended, unless you choose to keep it permanently; you can extend it by a further 30 days or delete it at any time from the extension, and we remove boards following a valid takedown request

4. Your Rights (GDPR)

You have the right to:

• Access your data — Export everything as JSON from Settings → Data → Export
• Delete your data — Uninstall the extension to remove all local data; contact us to delete any cloud sync data
• Withdraw consent — Disable cloud sync or uninstall at any time

For data requests or private support: support@readytab.cloud

For public bug reports or feature requests: github.com/yannkost/readytab-support

5. Security

• Protected workspaces — AES-256-GCM encryption with PBKDF2 key derivation; encrypted before storage or sync
• Transit encryption — All cloud communications use TLS/SSL
• Client-side encrypted sync — Cloud sync payloads are encrypted in the browser before upload
• No passwords stored by us — Workspace passwords never leave your device

6. Children's Privacy

ReadyTab is not directed at children under 13. We do not knowingly collect data from children.

7. Changes to This Policy

Changes will be posted on this page with an updated date. We will notify users before any material change that introduces new data collection.

8. Disclaimer of Liability

ReadyTab is provided "AS-IS" without warranties of any kind. We are not liable for data loss, service interruptions, or incompatibility with future browser updates. Always keep an export backup via Settings → Data → Export JSON. Maximum liability: refund of fees paid in the last 12 months.

9. Contact

• Email: support@readytab.cloud
• Public support: github.com/yannkost/readytab-support

10. Jurisdiction

This policy is governed by the laws of Switzerland.

---

Summary:

• No email address is collected in the extension; LemonSqueezy collects email for payment and receipts
• All data is local by default; nothing sent anywhere without your action
• Password-protected workspaces are end-to-end encrypted with your passphrase, which we never receive — we cannot read them. Other synced data is encrypted in your browser and stored as encrypted blobs.
• Cloud sync is optional and uses your license key with backend identity data — no separate account needed
• Snapshot sharing and managed boards use backend requests only when you use those features
• Link health checks are optional and off until you enable them
• LemonSqueezy handles payment and collects your email for the purchase receipt — we do not collect it in the app
• No tracking, no ads, no analytics