Privacy notice: the TabKeep extension, license site and vault

Last updated: 6 November 2026. Controller: Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye, support@atesensoftware.com.

The TabKeep extension (free features)

TabKeep saves your open windows, tabs and tab groups so you can restore them. For each saved tab it keeps the address, the page title, whether it was pinned, its tab group (name, color, collapsed or not) and, when the browser offers one, the address of the site icon. Everything is kept in the extension's own storage on your computer (chrome.storage.local). Nothing is sent to us or to anyone else unless you turn on Pro cloud backup below.

TabKeep has no analytics, no advertising, no tracking, no remote code and no accounts. It does not read page contents and has no access to websites. Its permissions are: tabs (read the address and title of open tabs, and open tabs when you restore), tabGroups (save and recreate groups), storage and unlimitedStorage (keep your sessions on your computer), and alarms (the automatic backup every 10 minutes).

When you restore a large session, most tabs open as small placeholder pages that show the saved title and load the real page only when you open that tab. Chrome, not TabKeep, then requests that page and, for sessions of up to 150 tabs, the saved site icon from the websites you originally visited, as it would for any tab you open. You delete your data by deleting sessions in TabKeep or by removing the extension.

When you buy

Paddle, the merchant of record, collects your name, e-mail address, billing address and payment details in its own checkout, under Paddle's privacy notice. Paddle tells our server the ids of your customer record, subscription and transactions, the price and the paid period. Our server asks Paddle for the e-mail address on your payment record only to send you one license e-mail, and does not store that address.

What the license server stores

• The license key, its id, the plan, the paid-until date (none for lifetime) and the expiry date, and whether it was revoked and why.
• Paddle's subscription and transaction ids and amounts, to renew the key and to apply refunds and chargebacks.
• A keyed hash of your e-mail address (HMAC-SHA256), so "Lost your key?" can find your keys. Your e-mail address itself is not stored.
• Paddle's webhook event ids, to process each event once.

The encrypted vault (Pro)

If you use cloud backup, the extension encrypts your sessions and snapshots on your device with a key derived from your passphrase. The passphrase and the key never leave your device. The server stores: the encrypted files, a random salt and an encrypted check value (so another device can tell a right passphrase from a wrong one), and for each file only its random id, its size and the time the extension gave it. Tab addresses, page titles and names are inside the encrypted files; we cannot read them and do not log them. The files belong to your license and are not reachable with any other license key.

Your encrypted files stay while your license is active. After a refund or chargeback you can still download them; we delete them when you ask.

The waitlist

Until online checkout opens, you can leave your e-mail address on the home page. We store the address, the plan you looked at and the date, only to write to you once when checkout opens, and delete it after a year at the latest, or earlier when you ask.

The extension's daily check

If you entered a license key, the extension sends the key, and nothing else, to this server at most once a day. To limit abuse, a keyed hash of your IP address is counted for up to two days. Without a license key the extension never contacts this server.

E-mail and hosting

License e-mails are sent through Resend (Resend, Inc.) from alerts@atesensoftware.com. The site, server and vault run on Cloudflare (Cloudflare, Inc.) Workers, D1 and KV, which process connection data such as IP addresses to deliver and protect the service.

Cookies and tracking

This site sets no cookies and uses no analytics. Paddle's checkout, when you open it, runs in Paddle's frame under Paddle's notice.

Your rights

You can ask for access to, correction or deletion of your data, or object to its processing, by writing to support@atesensoftware.com. You may also complain to your data protection authority (in Türkiye: KVKK).

Legal bases: performing the contract (issuing your key and keeping your encrypted backups), your consent (the waitlist), legal obligations, and our legitimate interest in preventing abuse.