VisTabPrivacy policy
VisTab provides a browser new tab and optional account-based cloud sync. This policy describes the data used by the features currently available at vistab.app.
Data on your device
You can use VisTab without an account. Settings, goals, tasks, notes, links, favorites and focus records are stored on your device. Choosing to connect an account lets you decide whether to merge this device’s data into cloud sync. Local backups are files you export and manage yourself.
Accounts and sign-in
Email accounts use your name, email address and a hashed password. Google sign-in provides an account identifier, name, email address and profile image; VisTab does not receive your Google password. Authentication records, provider tokens and session cookies are used to sign you in and protect your account. We request only basic Google identity information, not access to Gmail, Drive or contacts.
Sync and connected devices
When you authorize a device, VisTab stores its name, authorization status and activity timestamps. Connected accounts can sync settings, goals, tasks, notes, links, favorites, personal wallpaper choices and focus records. Timers run independently on each device. Personal images are uploaded only when you choose to upload them and image storage is configured.
Services that process data
Cloudflare hosts the website and API, and Supabase provides the server database and optional image storage. Google processes Google sign-in. Account verification, email changes, password recovery and deletion confirmations use Resend when configured. Stripe processes subscription payments and retains necessary billing records; VisTab stores customer, order and subscription identifiers and signed membership credentials. VisTab does not receive full card numbers. Weather requests use Open-Meteo when configured and include the selected location. Network providers receive information needed to deliver requests, such as IP addresses. Remote images are fetched from their hosting services. These providers process data under their own policies.
Your choices and deletion
You can sign out, revoke connected devices and remove synced content through VisTab. Signing out does not delete the cloud account or its data. You can also revoke VisTab access from your Google Account. Profile supports an optional full name, birthday and avatar. You can request account deletion from Profile and confirm it through your email. Deletion stops subscriptions immediately without an automatic refund, revokes devices, removes cloud data and private images, and retains necessary de-identified billing records. Contact us below about retained data.
Contact
For privacy questions or account and data deletion requests, email: ssybb1988@gmail.com