Privacy Policy

Privacy at a glance

This is a quick summary. Full details are provided below.

1. Controller and contact

David Struhs, independent operator and developer of tabbaze (Switzerland). David Struhs, Schorenstr. 68, 9000 St. Gallen, Switzerland.

Privacy inquiries: support@tabbaze.com. Postal address: David Struhs, Schorenstr. 68, 9000 St. Gallen, Switzerland.

2. Information we process

When you visit our website, technical connection information such as IP address, time, requested pages, browser and device details may be processed to deliver, operate and secure the service.

The local Free version generally stores the links, projects and categories you create in your browser on your device. Clearing browser storage or changing devices may result in data loss; use the available export feature to make backups.

If you register or log in, we may process your email address, technical user identifier and session information. Where cloud storage is enabled for your account, your saved links and workspace settings may also be stored in the cloud.

When you contact us, we process your email address, message and the communications necessary to respond.

3. Signing in with Google

If you choose Google sign-in, the authentication service receives information needed for login, including a Google account identifier and, where provided, your email address, name and profile image.

This data is used to create, authenticate and identify your account. Google sign-in alone does not grant tabbaze access to Gmail messages, Google Drive files or your search history.

4. Service providers

We use Vercel for website hosting and connection data, Supabase for authentication and database storage if enabled, Resend for technical emails, and Hostpoint for support correspondence. Google is used only when you choose to sign in with Google. Website live search uses Wikidata (Wikimedia) for suggestions.

The current Free beta does not have an active paid checkout. If paid plans are introduced, we will update the information about payment service providers and associated data processing before enabling paid orders.

5. Live website search and regional suggestions

When you use live website suggestions, your browser sends the search term to our own search endpoint. Our server sends eligible terms to Wikidata (Wikimedia) to retrieve website suggestions while you type. Avoid entering confidential information into this search.

The search service rejects some sensitive-looking input such as email addresses and complete URLs. Your IP address is temporarily used in server memory for basic request-rate limiting. tabbaze does not permanently store search terms or results in its own database. Third-party providers may maintain their own technical logs.

To suggest relevant regional websites, our server can use a country code provided by our hosting platform. We do not request an exact street address or GPS coordinates. If you manually select a region, that preference is stored in your browser.

An optional Brave Search fallback exists in the code but is not automatically active in the local Free version. If enabled, it would be separately disclosed.

6. Browser storage and cookies

Local functionality uses browser storage to keep your links and preferences on your device. Authentication may require technically necessary session cookies or other session storage.

Any additional analytics or marketing tools must be separately assessed and disclosed before activation, where required.

7. Retention and security

Local workspace data remains on your own device until you remove it or the browser clears it. Account data is generally needed while the account is active, subject to legal retention requirements and limited technical backups.

Technical logs, security information, support communications and account data are retained according to their purpose, technical requirements and applicable legal retention obligations. Contact support@tabbaze.com for more details about retention periods, backups and account deletion.

Appropriate technical and organisational security measures are used, but no online system can guarantee absolute security.

8. International processing

The Supabase project's database region is Switzerland (eu-central-2). This does not mean that authentication, support, hosting, subprocessors or other provider processing takes place exclusively in Switzerland.

Service providers may process personal data internationally, including countries without an equivalent level of data protection. For details about the providers, countries and safeguards used, contact support@tabbaze.com.

9. Legal bases where GDPR applies

Where the GDPR applies, account registration and authentication – including optional Google sign-in – are processed as necessary to provide the service you request (Article 6(1)(b) GDPR).

Technically required website operation, service security, abuse prevention and ordinary support correspondence may be based on legitimate interests (Article 6(1)(f) GDPR), balanced against your rights and freedoms.

Any legally required retention or disclosure is based on compliance with a legal obligation (Article 6(1)(c) GDPR). Optional non-essential technologies would require consent where applicable (Article 6(1)(a) GDPR).

Account details needed for sign-in are required to register; you can still use the browser-only Free version without an account. tabbaze does not currently make solely automated decisions with legal or similarly significant effects on individuals.

10. Your rights

Subject to applicable law, you may request access to your data, correction of inaccurate data and deletion or disclosure of your data where legally required.

Contact support@tabbaze.com to make a request. Where GDPR applies, you may also have rights to restrict or object to processing, to data portability, to withdraw consent for the future and to lodge a complaint with the competent data protection authority.

11. Updates

We may revise this policy to reflect changes in our services, providers or legal requirements. The version published on our website will apply.