Privacy Policy

Effective 1 August 2026.

Tabmory saves the tabs you choose into your own private iCloud storage, so you can reopen and read them on your other devices. This page explains exactly what that means for your data.

The short version: Tabmory has no server. Everything you save goes from your device straight to your personal iCloud account, and the developer cannot see any of it.

What Tabmory stores when you save a page

Only when you explicitly save a page, by clicking Save in the extension, using the right-click menu, or sharing to Tabmory from an Apple device, Tabmory records:

• the page's address, title and site name
• a reading copy of the page: its article text and simplified HTML, with scripts and other active content removed, capped at roughly 700 KB of HTML and 200 KB of text per page
• the author and hero image address, when the page publishes them
• an estimated reading time
• anything you type yourself: a description, a note and tags
• how you filed it: folder, favourite, archived and unread
• the date and time you saved it

Tabmory does not read pages you have not saved. It has no permission to run on websites in the background. It reads a page only at the moment you ask it to save that page.

Where it goes

To your own private iCloud database, inside the CloudKit container iCloud.com.speranda.tabmory, using Apple's CloudKit service. Nowhere else.

The container belongs to Speranda, but everyone who signs in gets a separate, private database inside it. Speranda has no technical means to read, list or recover any user's records, and neither does any other Tabmory user. The data counts against your iCloud storage allowance, not Speranda's.

Apple Inc. stores and processes this data as your iCloud provider, under the Apple Privacy Policy.

There is no Tabmory server. No analytics service, no advertising network, no crash reporter, and no third party other than Apple.

What stays on your computer

In the browser's or the app's own storage, Tabmory keeps:

• your settings
• the iCloud session token Apple issues when you sign in. It is short-lived and rotates constantly. Tabmory never sees, receives or stores your Apple Account password
• pending saves that have not reached iCloud yet, including their reading copies, so that saving works offline and nothing is lost
• saves that iCloud permanently rejected, kept visible rather than silently discarded
• a cache of your library's titles, addresses, descriptions and tags, so the list and search still work while you are offline

Searching happens entirely on your own device. What you type into the search box is never sent anywhere.

Signing in

Tabmory opens Apple's own sign-in page, at apple.com, in a separate window. You enter your Apple Account details there, with Apple. Apple returns only a temporary token that permits access to your own private database. Tabmory never sees your Apple Account name, password or two-factor codes.

Private browsing

The Firefox extension is disabled in Private Windows and cannot save pages opened in them.

Deleting your data

• Signing out removes the session token and the local library cache from that browser or device.
• Uninstalling removes everything Tabmory stored locally.
• Your saved pages live in your iCloud account, so you control them. Delete individual bookmarks from Tabmory on any device, or remove Tabmory's data from your Apple Account settings. Speranda cannot delete your data for you, because Speranda cannot reach it.

Children

Tabmory requires an Apple Account, so Apple's own minimum age rules apply. Tabmory is not directed at children and collects nothing beyond the pages an account holder chooses to save.

Browser and app permissions

Changes

Material changes are published on this page with a new effective date. If what Tabmory collects ever changes, you will also see it in the browser's or Apple's own permission prompts.

Contact

Questions about this policy: [email protected]