Privacy policy
Who is responsible
Datum Tab is a Chrome extension made and operated by <3 (lt-three) (“we”), which is also the contact for anything about privacy (see Contact at the end of this page).
In short
- Everything the extension reads or remembers stays in your browser (
chrome.storage.local,chrome.storage.sessionand IndexedDB of the extension). We run no server for it and receive none of your data. - We do not sell or share your data, do not show ads, and do not use analytics or tracking of any kind.
- The extension talks directly from your browser to Google (Calendar), GitHub (pull requests) and, only if you allow it, to the sites you bookmarked (their icons). Nothing is relayed through us.
- Google Calendar access is read-only and is used only to show today's events on the new tab page.
What the extension accesses and why
| Data | Chrome permission | What it is used for | Leaves your browser? |
|---|---|---|---|
| Bookmarks | bookmarks | Read the bookmark tree to show folders and tiles. Bookmarks are created, edited, moved or deleted only when you do it in the extension (drag and drop, edit, menu, dropping a link). | No |
| Open tabs and pinned tabs | tabs | List open tabs (title, address) for the search box and “add an open tab to bookmarks”; remember the origin address of each pinned tab, focus, reorder, reset or open tabs when you ask. | No |
| Site icons from Chrome | favicon | Ask Chrome's own favicon service for the icon of a page, to draw tiles and search results. | No (the request goes to Chrome on your device) |
| Settings and caches | storage | Remember your settings and short-lived caches (see “What is stored and for how long”). Not synced across devices: only storage.local and storage.session are used, never storage.sync. | No |
| Google Calendar events | identity and the calendar.calendarlist.readonly and calendar.events.readonly scopes | After you connect, read the names of your calendars and the events of today and tomorrow in the calendars you chose, to show the day's agenda, the next meeting and its Meet link. See “Google user data”. | Fetched by your browser from Google; not sent anywhere else |
| GitHub pull requests | host access to github.com and api.github.com | List the open pull requests you are involved in (title, repository, author, CI and review state, stack information). Default: your existing github.com login session in this browser, read-only requests. Optional: a personal access token you paste in the settings, sent only to api.github.com. | Fetched by your browser from GitHub; not sent anywhere else |
| Icons from the sites you bookmarked | optional host access (https://*/*, http://*/*), only if you allow it | For each bookmarked or pinned page, fetch that site's own icon so small icons stay sharp (details below). Without the permission this never happens. | Requests go to the bookmarked sites themselves, nobody else |
Searching. Matching what you type against your bookmarks, pinned tabs, pull requests and open tabs happens locally. Nothing is sent while you type. Only when you press Enter on the “Search Google” row does the extension open https://www.google.com/search?q=… with your text in the tab, and from then on Google's own privacy policy applies to that search.
Google user data
Datum Tab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Scopes requested:
https://www.googleapis.com/auth/calendar.calendarlist.readonly(see the list of your calendars, to let you choose which ones to show) andhttps://www.googleapis.com/auth/calendar.events.readonly(view events on your calendars). Both are view-only. The extension cannot create, change or delete events or calendars. - What is requested: your calendar list (id, name, whether it is your primary calendar and whether it is selected in Google Calendar) and, for each calendar you chose, the events from the start of today to the end of tomorrow in your local time: id, title, start and end, status, link to the event, Meet link, location, your own response and the number of attendees, event type and transparency.
- What it is used for: only to display those events on the new tab page for you (the next-event card, the day's list, “nothing today, tomorrow starts with…”, a Meet shortcut, and the context menu on an event). It is not used for anything else.
- No human reads it, no transfer, no AI training: We do not see your calendar data and have no way to. It is not transferred to anyone, not used for advertising, not sold, and not used to develop, improve or train any generalized artificial intelligence or machine learning model.
- Storage: a short-lived copy of the shown events in
chrome.storage.localon your device, so the page opens instantly (see below). The OAuth access token is handled by Chrome (chrome.identity); the extension does not write it to storage and does not log it. - Stopping: use Disconnect (切断) in the extension's settings (the token is revoked at Google and the cached events are deleted), or remove access at myaccount.google.com/permissions. Removing the extension also deletes everything it stored.
GitHub data
With the default setting the extension makes read-only requests (GET) to github.com in your browser, which attach your existing GitHub login cookies the same way github.com does when you visit it; the extension does not read or store those cookies. It reads the pull request lists and CI/review state that GitHub's pages use, and, for a pull request in a stack, that pull request's page to learn the other pull requests of the stack. This uses GitHub's own web interface, which is not a public API and may change.
If you paste a personal access token in the settings, it is stored in chrome.storage.local on your device, placed only in the Authorization header of requests to api.github.com, and can be removed in the same settings. A read-only token is enough. Pull request data is not sent anywhere else.
Icons from the sites you bookmarked (optional)
If you grant the optional permission (a banner on the new tab page asks once; you can decline, dismiss it, or revoke it later in the settings), the extension's background worker requests, for each bookmarked page and each pinned tab's origin address, the page itself (only the beginning: it stops at the end of the page head or after 256 KB) and then at most three icon files that page names. Requests are plain GETs sent without cookies or credentials and without a referrer, time out after 8 seconds, and go only to those sites (including private or local addresses if you bookmarked them). The icon (at most 512 KB, or 100 KB for an SVG, after a safety check) is shrunk to at most 64 px and kept on your device. Nothing about this is sent to us or to any third party.
What is stored and for how long
All of the following is kept on your device only:
| Item | Contents | Retention |
|---|---|---|
| Calendar cache | Today's and tomorrow's events as shown (title, times, Meet link, location, event link, number of attendees) | Treated as fresh for 2 minutes, then refreshed; an older copy of the same day is shown while the new one loads and is replaced at the next refresh. Deleted on disconnect or when the extension is removed. |
| Calendar settings | Whether you connected; which calendars you chose | Until you disconnect or remove the extension. |
| Pull request cache | The pull request list as shown, and the members of stacks | Fresh for 2 minutes (stack members re-checked after 10 minutes); overwritten at each refresh. |
| GitHub token (optional) | The token you pasted | Until you remove it in the settings or remove the extension. |
| Your own order and recents | Pull request order (up to 200 ids), the last 6 opened items, the time you last opened the page, pinned-tab origin addresses, the dismissed state of the icon banner, the GitHub organization and user names you chose to limit the pull request list to (and the ones seen before, so they stay on offer) | Until you reset them or remove the extension. (The pinned-tab to tab mapping lives in storage.session and disappears when the browser closes.) |
| Site icons | Icons fetched from bookmarked sites (IndexedDB datumtab-icons) | Successful fetches 14 days, failed ones 3 days, then fetched again. Clear them any time with Clear icon cache (アイコンのキャッシュを消す) in the settings. |
Removing the extension from Chrome deletes all of it. Bookmarks, tabs and your Google and GitHub accounts themselves are not changed by that.
Who else receives data
Nobody receives data from us, because we receive none. Your browser contacts, depending on what you use: www.googleapis.com and oauth2.googleapis.com (Calendar, and revoking access when you disconnect; governed by Google's privacy policy), github.com and api.github.com (pull requests, governed by GitHub's privacy statement), the sites you bookmarked (icons, only with the optional permission), and www.google.com only when you run a search. The extension loads no remote code, no analytics script and no advertising.
Children
Datum Tab is a tool for managing your own browser and accounts and is not directed to children. It collects no personal information about anyone.
Changes
If this policy changes, the new text will be published at this address with a new “last updated” date, and a change that affects what data is accessed will also be described in the extension's release notes.
Contact
<3 (lt-three) · datumtab@lt-three.com