1. Scope and contact
This policy describes the current TabParcel Chrome extension, the tabparcel.com website and their account services. The service is independently operated by an individual developer using the name TabParcel. “TabParcel”, “we” and “our” refer to that developer operating this service. The website’s origin server is in the United States.
Privacy questions and account deletion requests can be sent to [email protected]. The service is intended for people aged 18 and older. See also our Terms of Use.
TabParcel’s use and transfer of user data comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. This covers data handled on your device as well as the account, support and optional statistics flows described below. The separate Google API Services policy for Google account information is described in section 3.
2. Content on your device
When you use a collection, capture or editing tool, the extension handles the content needed for that action in your browser. This can include selected text, webpage content and URLs, images, tables, screenshots, SVG or canvas content, PDFs, editing drafts, and screen or audio recordings. Workbench results, some temporary recording data and preferences use browser storage. Capture is subject to the browser and operating system’s permission controls.
Collection and capture tools do not upload this content to TabParcel servers, synchronize local history to an account, or send it to a remote AI or OCR service. Optional usage statistics are off by default and require a separate choice. Crash uploads and advertising are not enabled. Usage statistics, user-confirmed diagnostic reports and website adaptation requests are separate flows described in section 4.
Offline OCR
OCR models are bundled for Simplified Chinese, Traditional Chinese, English, Spanish, Portuguese, Japanese, Korean, German, French and Indonesian. Image and screenshot recognition works on your device, offline from the first use. Your recognition language is remembered separately from the interface language. Images are not sent to a backend for recognition.
Source websites and destinations you choose
Fetching resources such as images, attachments or media contacts the source website. Some actions use that site’s existing signed-in browser session. The source can receive normal network information, including your IP address and the resource requested.
If you choose to send files to Google Drive, Dropbox or Box, the extension uses an open, signed-in destination webpage and its upload service. The selected provider receives the files directly; they do not pass through a TabParcel upload server. Review the files and destination account before sending. Source and destination services apply their own privacy policies and account settings.
The browser prepares each file before handing it to the destination: up to five items per batch, one at a time, with a 100 MiB limit per file. Larger files must be downloaded and uploaded manually. Stopping can interrupt a source read or prevent later handoffs, but it cannot cancel an upload the destination website has already taken over. Saved filenames may include a suffix to prevent collisions; check the result and the destination’s actual name.
Local data and website access
Open the extension account page → Local data and website access to review storage, select content categories and confirm cleanup. This covers local results and caches, drafts, screenshots, PDFs, OCR results, batch-link original input and recording data, including related images and recording chunks. Audio and screen recordings share a cleanup category. Downloaded files on your computer and files in cloud folders are not deleted.
Stop active recording, finish or stop downloads and other tasks, and close other workbenches before cleanup or permission revocation. Categories are cleaned separately, so some may succeed while others fail; failed categories can be retried. The storage figure is a browser estimate for the entire extension, including settings, rather than an exact sum of content file sizes. Retention varies by tool: some old records are cleaned on next use, and other records can be cleared manually. There is no universal 24-hour automatic deletion promise.
Optional website permissions can be revoked here and requested again when needed. Required host access for the TabParcel account service remains. Content cleanup preserves your login, interface language, OCR preferences and optional statistics consent. Clearing local content, revoking website permissions, signing out, deleting a website account and turning off statistics are separate actions. Cleanup does not erase server account data or statistics already received. See local cleanup help.
3. Account information
Signing in with Google, Microsoft or Apple lets that provider authenticate you. TabParcel receives basic identity information and stores an internal account ID, the provider’s identity identifier, your display name, an email address when available, email verification status, and account creation, update and last sign-in times.
Google supplies a verified email address. Microsoft may not supply an email, and its email is not marked verified by TabParcel. Apple may supply a private relay email address; we record the verification status in Apple’s signed response and retain the name when Apple first shares it. The same provider and provider account identify your account on the website and extension. Accounts from different providers are not automatically combined by email.
An account explicitly authorized for administration also has a permission record. Management actions record the administrator’s internal account ID, the report ID, action and time for accountability. These audit records do not contain the report’s original diagnostic text.
Feature access and free periods
Account records also include feature permissions and access grants: their source, random receipt or deduplication ID, start, expiry and any revocation time. First-time provider identities receive one 7-day signup trial; deleting and recreating an account does not reset it. A free renewal can be claimed from the account page when offered and no active period remains. These records are linked to your account so that the same access applies across your devices and periods cannot be claimed twice.
Compatible extension versions send their TabParcel access credential and the feature name to check permission before Extract current page or Send to begins. This request does not include the page URL, title, contents, destination, files or browsing history. The origin server does not keep a persistent history of individual feature checks; network providers still process normal connection information. Administrators can review accounts and restrict either feature. Permission and policy changes are recorded in a minimal administration audit.
Sign-in requests basic identity permissions. It does not give TabParcel access to your mail or cloud files. Your provider’s password is not sent to TabParcel. Provider tokens are processed temporarily to validate sign-in and to revoke Apple authorization during requested deletion; they are not stored in the account database. Separate TabParcel credentials maintain your website or extension session.
Information received from Google APIs is handled under the Google API Services User Data Policy, including its Limited Use requirements. Basic Google account information is used for sign-in, account operation, security and requested support. It is not sold or used for advertising or unrelated profiling.
4. Website, support and requests
Website requests and security
Our hosting server and Cloudflare process requests to serve and protect the website and API. Technical data can include your IP address, request time, requested address, browser and device information, referring page and response status. Server logs support security, troubleshooting and service operation. Authentication callback and extension authorization routes are excluded from the origin web server’s access logs; sensitive authentication headers and selected authorization parameters are redacted from other origin access logs. Cloudflare also processes traffic as the website’s proxy and security provider.
Website analytics and performance
Cloudflare currently inserts a Web Analytics performance script into website pages. It measures visits and loading performance and provides statistics such as page paths, referring sites, browser, device type and country. This concerns visits to the TabParcel website, not the contents you collect in the extension.
Cloudflare describes Web Analytics as using no analytics cookies or visitor fingerprinting, and says it does not log URL query strings in that service. This does not mean Cloudflare receives no IP addresses or request information when delivering and securing the website. See Cloudflare Web Analytics, its data collection FAQ and its Privacy Policy.
Google Search performance
We also use Google Search Console to review aggregated Google Search performance, including clicks, impressions, search queries, landing pages and country or device summaries. Authorized administrators use these reports to improve the website’s search visibility. They are not linked to your TabParcel account or local extension history.
Optional Google Analytics
Website and extension usage statistics use separate Google Analytics 4 data streams and separate opt-in choices. Both are off by default. Declining or withdrawing does not affect browsing, sign-in, access periods, local tools or your ability to submit a support report. Signing in does not enable statistics or synchronize these choices.
On the website, we load Google’s analytics script only after you allow it. We send the fixed address and title of a public TabParcel page, without a referring page. Account, administrator and sign-in pages are excluded, as are URLs with query parameters or fragments. Google also receives the network and browser information involved in contacting its service, including your IP address. Choose “Analytics preferences” in the public website footer to change your choice. Withdrawal disables collection, clears our accessible GA cookies and reloads the page to stop the already-loaded script. Cloudflare’s separate service above is not controlled by this Google Analytics choice.
In extension versions that offer usage statistics, enable them in the account page’s usage statistics setting. Events describe fixed tool or screen identifiers, actions and outcomes, optional operation duration rounded to 100 milliseconds (maximum five minutes), predefined source/destination identifiers, extension version, interface language, and a numeric session identifier. A random browser identifier and an event UUID support counts and short-term duplicate prevention. These identifiers are separate from your account and are not fully anonymous: they can distinguish activity from the same opted-in browser.
These events do not include collected page URLs, titles, content, search terms, filenames, files, clipboard text, account details, login credentials, raw errors or stacks. They pass through TabParcel’s fixed server endpoint, which forwards only approved fields to Google. We do not forward the caller’s IP address, User-Agent, cookies or account credentials, join statistics to account records, or save raw event bodies in our database or origin access logs. The server and Cloudflare still process network information to deliver requests and enforce limits. Rate-limit and duplicate metadata is keyed with one-way hashes and expires within 24 hours; duplicate entries expire after ten minutes.
Turning extension statistics off stops new events and deletes its local statistics identifier and session. Turning it on again creates a new identifier. Old events are not queued for later replay. Withdrawal does not automatically erase data already received by Google. Statistics represent an optional sample and are not billing, account, exact-user or complete success-rate records. We disable advertising personalization and do not use Google User-ID to link signed-in accounts. Google may process statistics outside your country. See the Google Privacy Policy and Google Analytics data retention information. Google report data follows the media resource’s retention settings; aggregate reports may be retained differently from user-level events.
Contacting support
If you email us, we process your email address, message, attachments and mail delivery information to handle your request. Our mail server and spam filters process messages and technical headers to receive mail securely. Spam and reputation checks may send sender or link domains and message fingerprints to reputation services. Please avoid sending passwords, sign-in codes, session tokens or unnecessary sensitive files.
The current website has no advertising or payment checkout. Fonts and the website’s own interface assets are hosted on this website.
Optional diagnostic feedback
The server supports reports that you choose to send after an extension failure. Reporting requires a compatible extension build with a preview and confirmation step; publishing the server endpoint does not enable automatic reporting in an installed build. Sending a report is optional and does not require signing in.
A report contains a random ID for that submission, the public extension client ID and version, feature and error code, an optional Chrome major version, an operating-system category, and any error summary, stack or description you review and choose to include. The server records receipt time and groups similar errors to investigate bugs. The report is not linked to your TabParcel account, email or a permanent installation identifier. The endpoint does not accept attachments, screenshots or arbitrary metadata.
Recognized URLs, email addresses, credentials and local paths are removed from diagnostic text by the supplied integration helper and again on the server. This is best-effort redaction, not a guarantee that free text cannot identify you. Review the preview, omit optional text when appropriate, and do not include private page content or credentials. Transporting the report still exposes normal connection information to the server and its network providers, including Cloudflare. The report record does not store your IP address.
Reports are used for troubleshooting and tracking fixes. Authorized administrators can inspect them and manage processing status, priority, resolution notes and deletion. Diagnostic text and internal notes are encrypted in the database. Abuse-prevention counters use keyed, daily-changing digests of network addresses, kept separately from reports and accounts and expiring within 24 hours. They do not contain the plain network address. Origin access logging is disabled for the submission and administration routes.
Website adaptation requests
A compatible extension can offer a separate request when a website is not supported. After you review the final preview and confirm sending, TabParcel receives the public page URL you choose, the content types you want to extract, an optional description, a random submission ID, and the extension’s public client ID and version. It does not include your browsing history, page title or body, screenshots, files, account ID or sign-in credentials. No sign-in is required. A URL can itself identify a person, so these requests are not described as absolutely anonymous.
The extension normally removes query parameters and fragments unless you explicitly keep page-location information in the preview. Recognizable credentials, OAuth and tracking parameters are removed. The server independently normalizes URLs and can reject local addresses or examples containing recognizable secrets. Submit only a public example that you are entitled to share, and review any remaining path or parameters for personal data.
We use requests to assess compatibility and plan website adaptations. Full example URLs, descriptions and internal notes are encrypted in the database; domains, requested content types, versions, status and timestamps are stored as processing metadata. Authorized administrators can review and delete requests, update their status and record notes. The server does not resolve example domains, fetch pages, extract metadata, take screenshots or load external previews. An administrator can choose to open the submitted link in their own browser without sending a referring page.
Requests are not linked to a TabParcel account, email, permanent installation identifier or an IP address in the request record. Separate, short-lived network digests support rate limits, as with diagnostics. Normal connection information still reaches our infrastructure and network providers. Submission and administration routes are excluded from origin access logs. Publishing this service does not automatically enable sending in an existing extension build.
6. How information is used
Information is used to perform the tools and transfers you request, create and operate your account, maintain sign-in sessions, answer support and privacy requests, protect the service against abuse, operate feature access and free periods, investigate optional diagnostic reports, assess website adaptation requests, track fixes, diagnose faults, and understand website performance. We may also process information where needed to comply with applicable law or establish, exercise or defend legal claims.
Where applicable law requires a legal basis, these purposes rely on providing the service you request, legitimate interests in secure operation and service reliability, legal obligations, or consent for processing that requires it. Legitimate interests remain subject to the protections and rights required by that law. Browser permissions and this policy do not provide blanket consent for unrelated future processing.
We do not sell personal information, share it for cross-context behavioral advertising, or use collected content to train AI models. No automated decision-making intended to produce legal or similarly significant effects is part of the current service.
8. How long data is kept
Retention depends on the data’s purpose, account status, security needs and legal obligations. The current configuration is described below. Expiry of an active credential makes it unusable; it is not a promise that every copy in database persistence or a backup is physically erased at that instant.
| Information | Retention or expiry |
|---|---|
| Local content and preferences | Kept in your browser until tool cleanup or deletion. There is no single period for every tool or universal 24-hour automatic cleanup. Some old records are cleaned on next use. Use the extension account page’s Local data and website access controls for manual cleanup. Downloaded and cloud files remain under your control. |
| Account records | Kept while your account is maintained, unless removed following a verified deletion request or another applicable reason. Feature permissions and grant receipts follow this account retention period, including expired periods needed to recognize previous grants and retries. There is no scheduled inactive-account purge. Access-management audit records are eligible for deletion 90 days after the action and removed daily. |
| Signup-trial identity marker | A purpose-keyed digest is retained while the signup-trial policy operates, including after account deletion, to prevent another registration trial. It does not contain the account profile or grant history. |
| Website sessions and sign-in state | Website sessions: up to seven days after sign-in. Temporary authorization state: up to ten minutes and consumed when used. Signing out revokes the current website session, not every other session. |
| Extension authorization | One-time completion codes: up to 60 seconds. Access credentials: up to 15 minutes. Refresh sessions: up to 30 days from sign-in. Rotation does not extend that final expiry. Extension sign-out revokes that session; expired credential records may remain until their scheduled cleanup. |
| Diagnostic feedback and administration audit records | Reports become eligible for deletion 90 days after receipt and are removed by a daily cleanup job. Management audit records follow the same 90-day schedule from the action date. You can request earlier removal using a report ID; verification and applicable legal exceptions may apply. Restricted recovery copies can outlast active records as described below. |
| Website adaptation requests | Eligible for deletion 90 days after receipt and removed by daily cleanup. The related management audit follows a 90-day schedule from each action. Earlier removal can be requested with the receipt ID, subject to verification and applicable legal exceptions. Restricted recovery copies can outlast active records as described below. |
| Access, security and mail logs | Kept for operation, troubleshooting and abuse prevention under the server’s log rotation settings. Some active and system logs have no fixed age limit; rotation does not guarantee that all logs disappear after a stated number of days. |
| Support correspondence | Kept to address the request, follow up, and handle relevant security or legal needs. The mailbox currently has no automatic expiry. You can ask for deletion, subject to any justified retention needs. |
| Maintenance backups | Restricted recovery copies may outlast active records until the copies are replaced or removed. There is no fixed automated backup expiry at present. A deletion request must also take relevant recovery copies into account. |
Fixed maximum periods for operational logs, support mail and recovery copies remain under review. Third-party providers retain information under their own policies. For Cloudflare analytics, see the provider documentation linked in section 4.
9. Your choices and rights
Use Local data and website access in the extension account page or each tool’s deletion controls where available, manage extension access in Chrome, and remove downloaded or exported files yourself when no longer needed. Revoking a provider’s sign-in authorization stops that connection but is not a request to delete the TabParcel account. Signing out is also separate from account deletion.
Depending on the law that applies to you, you may have rights to access or correct personal information, request deletion or a portable copy, restrict processing, or object to certain processing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. You may also complain to the relevant data protection authority. These rights can be subject to lawful exceptions.
Delete your account or ask for privacy help
Sign into your account page, review the deletion details, type DELETE and confirm with the same sign-in provider account. Successful provider confirmation completes deletion immediately; cancellation or an identity mismatch does not. The last administrator must transfer administrator access before self-deletion. For Apple, the app’s sign-in authorization is revoked before deletion completes. For other privacy requests or help, email [email protected]. We may need to verify account ownership. Do not send passwords, authorization codes or tokens.
A verified account deletion request covers the account profile, linked provider identities and account sessions, subject to any retention required by applicable law or justified security needs. We will explain any applicable exception and respond within the period required by the law that applies. Local extension content, exported files, provider accounts and files already sent to another service require separate deletion under your control. Signing in again after deletion creates a separate account when you sign in again; it does not restore the old account’s access periods or grant another signup trial for the same provider identity.
We retain a minimal keyed digest of the provider, issuer and stable provider identifier to recognize an identity that has already used or deleted an account. The digest does not contain plaintext email, name, provider identifier or an old account ID, but it is a pseudonymous marker that can recognize the same identity when it signs in again. We keep it while the signup-trial policy operates, solely to prevent repeated registration trials; it has no scheduled expiry. A returning identity can still claim a free renewal when the current offer and eligibility rules allow. Different provider identities are not merged by email.
Deletion removes the active profile, provider identity records, feature flags and access grants. Old website and extension credentials stop being accepted. Redis session cleanup normally removes their keys immediately; if cleanup is interrupted, database checks still reject the deleted account and credential records expire within their existing limits. Session-index and revocation metadata may remain for up to 30 days. Independent support submissions and administration audits follow their own retention periods; deleted account links in audits are cleared. Local extension content, files, optional statistics choices and data already received by other services require separate controls. Historical recovery copies follow the backup handling described above.
10. Security
The website uses HTTPS, restricted server access and authentication controls. Website session cookies are secure and HTTP-only; server-side session credentials are represented by cryptographic digests. Authentication exchanges use state and identity validation, with additional protections appropriate to the sign-in flow. Access to account records and maintenance copies is restricted.
No system can guarantee absolute security. Protect your device and sign-in provider account, review capture and sharing actions, and contact us if you suspect unauthorized access. Files you send to another service are also subject to its security and permissions.
11. Adults only
TabParcel is intended only for people aged 18 and older. We do not knowingly collect account information from people under that age. If you believe a person under 18 has provided personal information to TabParcel, contact us so we can investigate and take appropriate action, including removal where necessary.
12. Updates and questions
This policy will be updated when the service or its data handling changes. Statistics beyond the optional processing described above, remote AI processing, content uploads, cloud history or paid features are not authorized by this policy. Before introducing new processing, we will describe the actual behavior and provide any notice, choice or consent required by applicable law.
To ask about a diagnostic report or website adaptation request, include its receipt ID. These submissions are not linked to accounts, so an email address or sign-in provider alone does not reliably identify the submission. The date above identifies this version. Material changes will receive additional notice where required. For privacy questions or requests, contact [email protected].