Last updated: 12 July 2026
Tab Truck is built so that we cannot see your data, not merely so that we promise not to. This page explains exactly what the extension and web app touch, where it goes, and what we — the developer — can and cannot access.
To do its job, Tab Truck processes:
Tab Truck only reads a tab when you explicitly save it (via the popup, a keyboard shortcut, or the right-click menu). It does not monitor your browsing, and it does not read pages in the background.
Saved groups and notes are stored in your own Google Drive, using two narrowly-scoped Google permissions:
drive.appdata — a hidden, per-application folder that only Tab Truck can access. Your synced tabs and notes live here. The extension cannot see any of your other Drive files.drive.file — access limited to files Tab Truck itself creates. This is used only for the optional share links feature, which writes an encrypted file to a “Tab Truck Shares” folder.We request these two scopes specifically because they are the narrowest that make the product work. Tab Truck never requests full access to your Drive.
When you enable end-to-end encryption, Tab Truck derives a key from a passphrase you choose, entirely on your device. Your groups and notes are encrypted with that key before they are uploaded to Google Drive. The passphrase is never transmitted and is not recoverable by us — if you lose it and your recovery key, your data cannot be decrypted by anyone, including the developer.
Shared links carry their decryption key in the link’s URL fragment (the part after the #), which browsers never send to any server. The person who opens the link can read the shared item; Google and the developer only ever see ciphertext.
Nothing. Tab Truck has no server that receives your data. Your Google sign-in authorizes your browser to talk to your Drive; that authorization is not shared with us. We have no ability to read, collect, or sell your tabs, notes, or personal information.
The only third party involved is Google Drive, which stores your (encrypted) data under your own Google account and its privacy policy. Tab Truck sends no data to any other service. There are no analytics or advertising SDKs in the extension or the web app.
Tab Truck’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data accessed via Google Drive is used solely to provide and improve the tab backup, sync, and sharing features you request; it is not transferred to others except as necessary to provide those features, and it is never used for advertising or sold.
Your data remains in your Google Drive until you delete it. You can remove a group or note at any time from the manager, export everything to a file, or disconnect Google Drive to stop syncing. To delete all Tab Truck data, delete the app-data folder’s contents (via the extension) or revoke Tab Truck’s access from your Google Account permissions page.
Tab Truck is not directed at children under 13 and does not knowingly collect information from them.
If this policy changes, the “last updated” date above will change and the new version will be posted here.
Questions about this policy: donborero@gmail.com.