# TabFuzzy — Privacy Policy (Draft)

_This is a draft privacy policy intended to accompany TabFuzzy if and when it is published to the Chrome Web Store. It reflects how the MVP actually behaves._

## Overview

TabFuzzy is a Chrome browser extension that helps you find and switch between your currently-open tabs using a fuzzy-search command bar. TabFuzzy is designed to be useful with the smallest possible amount of data access.

## What the extension does

TabFuzzy:

- Reads metadata about your currently-open tabs so you can search and switch between them.
- Stores a small set of preferences (theme, search scope, display options) on your device.
- Lets you launch a search overlay via a keyboard shortcut.
- Lets you switch focus to a chosen tab and optionally close a tab.

That is the entire feature set. There is no account, no sync, no server-side component.

## What tab metadata is accessed

When you open the TabFuzzy command bar, the extension uses Chrome's `tabs` API to retrieve a list of currently-open tabs. For each tab it accesses only:

- the tab title
- the tab URL
- the favicon URL
- the tab's internal Chrome tab ID
- the window ID the tab belongs to
- whether the tab is active
- whether the tab is pinned

This information is used in-memory to render the result list and route your selection. It is not written to disk by TabFuzzy. It is not sent anywhere.

## What settings are stored locally

TabFuzzy persists only the following preferences in `chrome.storage.local`:

- theme (system / light / dark)
- whether to search only the current window
- whether to show URLs in result rows
- whether to show favicons in result rows
- maximum number of results to display
- whether to close the overlay after switching tabs

You can erase these settings at any time using the **Clear local data** button on the options page, or by uninstalling the extension.

## What data is NOT collected

TabFuzzy does not access, collect, store, or transmit:

- the contents, DOM, or JavaScript state of any web page
- cookies, local storage, or session storage of any site
- form data, passwords, payment information, or credentials
- browsing history beyond what is currently open
- bookmarks or download history
- analytics, telemetry, performance metrics, or crash reports
- IP address, geolocation, or device fingerprint
- any data from any other extension

TabFuzzy makes no network requests of its own.

## No sale of personal data

TabFuzzy does not sell, rent, share, or otherwise disclose personal data to any third party. There is no third party — TabFuzzy is local-only.

## User control and deletion

You are in full control of TabFuzzy data on your device:

- **View settings:** Open the TabFuzzy options page from the popup or from `chrome://extensions`.
- **Change settings:** Toggle any preference on the options page; changes save immediately.
- **Delete settings:** Click **Clear local data** on the options page.
- **Remove the extension:** Uninstalling TabFuzzy from `chrome://extensions` removes its code and any data it stored locally.

## TabFuzzy Pro (optional paid upgrade)

TabFuzzy includes Pro licensing code for future paid features such as saved tab sessions. Checkout is not configured in this build. If a paid version is connected later, Pro should remain strictly opt-in and governed by the following rules:

- **Free users never trigger network activity.** If you do not activate a Pro license, TabFuzzy makes no network requests of its own, ever.
- **Activation data.** When you paste a license key and click Activate, TabFuzzy sends two things — and only these two things — to the license server: (1) the license key you entered, and (2) an anonymous install ID generated randomly on your device. It never sends tab metadata, search queries, browsing history, or anything about the pages you visit.
- **Periodic re-check.** Once activated, TabFuzzy may re-verify the license on browser startup to detect revocations. The re-check sends the same two fields (license key + install ID) and nothing else. If the re-check fails because the device is offline or the server is down, Pro stays enabled through a 14-day grace period.
- **Saved sessions are local.** Any sessions you save through Pro features live only in `chrome.storage.local` on the device where you saved them. TabFuzzy never uploads them.
- **Payment processing would be handled by a third party.** If checkout is added later, purchases should be processed by an external merchant such as Paddle, Lemon Squeezy, Polar, or Stripe. Their privacy policy would apply to billing data. TabFuzzy should never store payment card details.
- **Deactivation.** You can deactivate the license from the options page at any time, or wipe all TabFuzzy data (including the license and saved sessions) with the Clear local data button.

## Children's privacy

TabFuzzy does not knowingly collect any personal information from anyone, including children. Because the extension does not collect personal data at all, it imposes no special handling for children's data.

## Changes to this policy

If TabFuzzy ever adds features that change how data is handled (for example, optional cloud sync of saved tab sessions), this policy will be updated first, and any new data handling will be opt-in.

## Contact

For questions about this policy, please contact the TabFuzzy maintainers via the project repository.