What it stores, and where.

BentoTabs runs entirely in your browser. We have no account system, no servers that receive your data, no analytics and no advertising. We cannot see your containers, cookies or browsing.

What it reads:

• The web address of each request a container tab makes, so Chrome can attach that container's cookies.
• The cookies sites set in container tabs. They are kept in that container, on this computer.
• The addresses of open tabs, so links, restarts and "Reopen closed tab" keep each tab in its container.
• Site icons from Chrome's own icon cache, for the container list and the favicon dot.
• Requests from normal tabs reach the extension too, because Chrome cannot limit its listeners to some tabs. They are dropped on arrival: nothing about them is stored or copied into a container.
• Only when you copy a sign-in from normal browsing: your normal cookies for the sites you pick, and the local storage and IndexedDB of the tab you bring it from. They are copied into the container on this computer. To list the sites you can copy, it reads your normal cookies and counts them by site: only the site names and counts reach the settings page, and nothing of it is kept.

What it never reads:

• Page text, form fields, passwords or anything you type.
• Your browsing history, bookmarks or downloads.
• Anything from a site you have never opened in a container or copied into one.

Your containers (name, color, settings), the cookies and site data that sites set in container tabs or that you copy into a container from normal browsing, which tabs belong to which container, daily snapshots for undo, and your licence key if you buy Pro. All of it is kept in the extension's own storage on this computer. Chrome deletes it when you uninstall the extension.

Only two things, and only when they apply. If you buy Pro, the extension sends Polar (polar.sh), our payment provider and merchant of record, your licence key, a label with the product name and the date, and a random id made for this install, to check that the key is valid: once when you enter it and then about once a week. Like any server, Polar also sees your IP address. If you choose to report a broken site, the report page opens with the site's domain and the extension version after the # in its address, a part your browser never sends, and the report you send contains them and whatever you write. Nothing else is sent, ever: no cookies, no page addresses, no usage statistics.

Checkout happens on Polar's site. Polar handles your payment details and tax under its own privacy policy; we receive your email address and order, so we can help with refunds and lost keys.

A backup is a file you save yourself. A settings backup holds your containers and settings. A full backup (Pro) also holds sign-in cookies, so it is always encrypted with a passphrase you choose. We never receive a copy.

This site is static and served by Cloudflare. It sets no cookies and loads no third-party scripts, fonts or trackers. Like any host, Cloudflare receives your IP address, your browser's name and the address of each page you open, and may keep them in logs for security, under its own privacy policy.

Every permission the extension asks for is explained on the permissions page.