Who We Are
BelayTab is made by Pointerflow LLC, a company registered in Wyoming, United States (“we”, “us”). This policy covers the BelayTab browser extension, the Sync service, the web app at app.belaytab.com, and this website. Effective 24 September 2026.
Summary
| You are… | What reaches our servers |
|---|---|
| Using BelayTab without signing in | Nothing. Sessions, snapshots, history and settings stay in your browser on your computer. |
| Signed in with Sync | Your account email, device names, and the sessions you keep in BelayTab (tab titles, URLs, group names and colours, session names, tags, version history), stored to sync and back them up. |
| Paying for Sync | Your subscription status. Payment details go to Paddle, our merchant of record. We never see your card number. |
Data on Your Device
The extension stores your sessions, automatic snapshots, version history, trash and settings in your browser’s local storage (IndexedDB and extension storage) on your computer. If you turn on auto-export, it writes a JSON file to your Downloads folder. We can’t see any of this. Uninstalling the extension or clearing browser data can delete it, which is why BelayTab offers exports first.
Data We Hold With Sync
Sync is optional and paid. When you sign in, we process:
- Account data: your email address, and your name and profile picture if you sign in with Google. We use it to sign you in and to send service emails such as receipts and security notices.
- Session data: for each session you keep in BelayTab, the tab titles and URLs, their order, pinned state, tab group names and colours, session names and tags, and earlier versions (up to 90 days of cloud history).
- Device data: the device name you choose, the browser type and when each device last synced.
- Operational data: counts and timings of sync requests, used to keep the service running. Our logs never contain URLs or page titles.
We use session data only to sync it between your devices, back it up, and show it to you in the web app. We don’t sell it, share it with advertisers, use it for advertising, profile you, or use it to train AI models.
What We Never Collect
- The content of the pages you visit. BelayTab has no host permissions and runs no scripts on websites.
- Your full browsing history. BelayTab only handles tabs that are open or that you saved, snapshotted or restored.
- Keystrokes, form data, passwords or cookies.
- Analytics about which URLs you save. Any product analytics we add will count actions (such as “a session was saved”), never what was in them.
Extension Permissions
These are all the permissions BelayTab asks for, and why:
| Permission | Why |
|---|---|
tabs | Read tab titles and URLs so they can be saved |
tabGroups | Keep group names and colours |
sessions | Show recently closed windows on the Recovery screen |
storage, unlimitedStorage | Store your sessions on your computer |
alarms | Run snapshots on a timer |
favicon | Show site icons from the browser’s cache, not from the sites |
contextMenus | Right-click to save a page or link |
This Website
belaytab.com doesn’t use advertising or cross-site tracking cookies. We may use privacy-friendly, cookie-free analytics that counts page views and clicks on store buttons in aggregate. When you click an install button, the store (for example the Chrome Web Store or Mac App Store) handles the install under its own privacy policy. Our free tools, such as the bulk URL opener and converters, run entirely in your browser and never upload what you paste.
Service Providers
We use a small number of providers to run Sync. Each processes data only on our instructions:
| Provider | What for |
|---|---|
| Supabase | Database and sign-in for Sync accounts |
| Cloudflare | API servers, encrypted storage of version history, and hosting this website |
| Paddle | Checkout, billing, tax and refunds, as merchant of record |
| An email delivery provider | Sign-in codes, receipts and service notices |
These providers may process data in the United States and other countries. Where the law requires it, we rely on standard contractual clauses or equivalent safeguards for international transfers.
How Long We Keep Data
- On your device: until you delete it. Deleted sessions stay in BelayTab’s trash for 30 days.
- Sync data while subscribed: for as long as your account is active, with up to 90 days of version history.
- After Sync ends: we keep your cloud copy for 90 days so you can resubscribe or export, then delete it. Your local data is never locked or removed.
- Account deletion: database records are deleted immediately and stored version history within 30 days.
- Backups: encrypted database backups roll off within 30 days.
- Billing records: kept by Paddle and us as long as tax law requires.
Your Rights
You can export all your sessions from the extension at any time, in JSON, CSV, URL list or HTML bookmarks format. With Sync, you can also request a full account export and delete your account from its settings. Depending on where you live (for example under the GDPR or CCPA), you also have the right to access, correct, delete or port your data and to object to or restrict processing. We don’t sell personal information. To exercise a right, email [email protected]. You can also complain to your local data protection authority.
Legal bases (GDPR): providing Sync is performance of a contract; keeping the service secure is our legitimate interest; optional emails rely on your consent, which you can withdraw at any time.
Chrome Web Store Limited Use
BelayTab’s use of information received from browser extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Tab data is used only to provide BelayTab’s single purpose: saving, restoring and syncing your sessions. It is not transferred to third parties except as needed to provide that feature, for security, or to comply with the law. It is never used for advertising or credit decisions, and humans don’t read it unless you ask us to for support, it’s required for security, or the law requires it.
Children
BelayTab isn’t directed at children under 13 (or under 16 in the EEA and UK), and we don’t knowingly collect their personal data. If you think a child has created a Sync account, contact us and we’ll delete it.
Changes and Contact
If we change this policy, we’ll update the date above and list the change in the changelog. If a change affects how we use data you’ve already given us, we’ll tell signed-in users by email before it takes effect.
Questions: [email protected] · Pointerflow LLC, Wyoming, United States.