# Command Tab — Privacy Policy

_Last updated: August 28, 2026_

Command Tab is a personal productivity dashboard for the Chrome new tab and side panel. This policy explains what data the extension handles and where it goes.

## The short version

- Everything you put into the dashboard — widgets, tabs, notes, checklist items, bookmarks, preferences — is stored **locally on your device** using Chrome's built-in `chrome.storage.local` API.
- We do **not** operate any server. No account, no login, no analytics, no ads, no telemetry.
- The Weather widget is the only feature that makes an outbound network request. It sends the city name you typed (or your device's approximate coordinates if you tap "Use my location") to [Open-Meteo](<https://open-meteo.com>) so it can return the current conditions. Open-Meteo does not require an API key and does not receive any account or identity information.
- The Bookmarks widget fetches favicons for the sites you add via Google's public favicon service (`https://www.google.com/s2/favicons`). The domain of the URL you saved is included in each request; no other information about you is sent.
- The Open Tabs panel — a permanent part of the dashboard shell, always shown by default on the new tab page (collapsible) and in the side panel — reads the title, URL, and favicon of your currently open browser tabs so it can show and let you jump between them. This data is read live from Chrome's `tabs` API, is never written to storage, and is never sent anywhere — it exists only in memory while the new-tab page or side panel is open. Favicon images for open tabs are requested from Chrome's own built-in favicon cache (`chrome-extension://<id>/_favicon/`), not from any third-party server.

## What data is stored, and where

| Data | Where it lives | Who can see it |
|---|---|---|
| Widget instances, layouts, notes, checklist items, bookmarks, workspace tabs, theme, background color, grid columns, widget accent colors, widget font choice, open-tabs panel width | `chrome.storage.local` on your own device | Only you |
| A background photo you upload | Compressed in your browser and stored as `chrome.storage.local` on your own device — never uploaded anywhere | Only you |
| Theme and settings (mirror copy for fast page-load) | `localStorage` in the extension pages | Only you |
| Weather coordinates or city name at the moment of a fetch | Sent to Open-Meteo servers; not stored by us | Open-Meteo (per their [privacy terms](<https://open-meteo.com/en/terms>)) |
| Bookmark favicon requests | Sent to Google's favicon service | Google (per their standard terms) |
| Open tab titles, URLs, and favicons | Read live via Chrome's `tabs` API, held only in memory, never persisted or transmitted | Only you |

We do **not** collect, transmit, sell, or share any personal information. We do not use cookies, tracking pixels, fingerprinting, or third-party analytics.

## Permissions the extension requests

- **`storage`** — required to persist your dashboard across browser sessions.
- **`sidePanel`** — required to display the dashboard as a Chrome side panel.
- **`tabs`** — powers the Open Tabs panel (always present by default, collapsible) to list your open tabs' titles and URLs and to switch to or close one when you click it.
- **`favicon`** — required by the Open Tabs panel to show each open tab's site icon, fetched from Chrome's own built-in favicon cache rather than a third party.
- **`chrome_url_overrides.newtab`** — required to render the dashboard on the new-tab page. You can switch this off inside the extension's Preferences (choose "Minimal" or "Search only"). To fully restore Chrome's own new-tab page, disable or uninstall the extension from `chrome://extensions`.

We do not request access to your browsing history, bookmarks, cookies, or any content on other websites. The `tabs` permission is limited to tab metadata (title, URL, favicon) for tabs you currently have open — it does not expose page content, browsing history, or incognito tabs.

## Third-party services we rely on

- **Open-Meteo** — weather + geocoding, requested only when you use the Weather widget.
- **Google favicon service** — favicon images for bookmarks you add.

We have no business relationship with these services and cannot make guarantees about their practices. If you want to avoid them entirely, do not add the Weather or Bookmarks widgets.

## Children

The extension is not directed at children under 13 and does not knowingly collect information from anyone.

## Changes to this policy

If we ever change how data is handled, we will publish an updated version of this policy at the same URL and bump the "Last updated" date above.

## Contact

Questions about this policy: [email protected]