Privacy Policy

TL;DR

Orbit Station is local-first. By default, the extension makes zero external network requests and stores everything in your browser. A few optional features can be turned on from Settings — each one is off by default and clearly disclosed below:

• Weather widget — sends your latitude/longitude to Open-Meteo to fetch a forecast.
• Activation analytics — sends anonymous event names (no URLs, no content) so we can fix activation friction.
• Uninstall feedback survey — only runs if you visit the post-uninstall page and choose to send feedback.
• Cross-device sync (Pro) — if you upgrade to Pro and sign in with Google, your workspaces, links, notes and todos are synced to your private, account-scoped cloud storage so they appear on every device.

The Free tier stays account-free and fully local. Pro sync is strictly opt-in — you choose to sign in. We never run advertising and never sell your data. Ever.

What We Store on Your Device

All your settings, workspaces, links, notes, todos, and preferences live in your browser via chrome.storage.local. This data never leaves your device unless you explicitly export it as a JSON file, or you enable Pro cross-device sync (see the opt-in section below).

We do not collect, transmit, or store the following on our servers:

• Personal information (name, email, address, phone)
• Browsing history, visited URLs, or page content
• The contents of your notes, todos, workspaces, or links
• IP addresses (we do not log them)
• Tracking cookies, fingerprints, or advertising identifiers

Permissions We Request

Orbit Station requests the following Chrome permissions, each tied to a specific user-facing feature. None are used for background monitoring or data collection.

• storage — Saves your workspaces, settings, notes, todos, and preferences locally on your device via chrome.storage.local.
• tabs — Powers the "Import Open Tabs" feature. When you choose to import, we read the titles and URLs of your currently open tabs so you can pick which ones to add to a workspace. Tab data is displayed locally and never transmitted.
• sessions — Powers the "Recent Tabs" feature. We read your recently closed tabs so you can restore them with one click from the sidebar. Session data is displayed locally and never transmitted.
• bookmarks — Powers the "Import Bookmarks" feature. When you initiate an import, we read your bookmark tree so you can pick which bookmarks to add to a workspace. We never modify, delete, or transmit your bookmarks.
• search — Lets the new tab and command palette hand off search queries to your browser's default search engine via the chrome.search.query API. We do not change, override, or read your search settings.
• identity — Used only for optional Pro cross-device sync. When you choose “Sign in with Google,” the chrome.identity API opens Google’s consent screen so you can authenticate. We request the minimum scopes (openid, email, profile) and never request access to Gmail, Drive, Calendar, or any other Google service. Free users who never sign in are unaffected.

Optional Features (All Opt-In, All Off by Default)

How Optional Data Is Handled

Optional analytics and uninstall feedback are received by serverless API endpoints we operate (api/events and api/uninstall-feedback) and forwarded to a private email inbox via Resend (our transactional email provider). We do not store this data in a database, share it with third parties, or use it for advertising. Resend processes the message in transit only; we do not retain server logs of payload contents.

Open-Meteo is contacted directly from your browser when the weather widget is enabled. We do not proxy or log those requests.

If you enable Pro cross-device sync, your content is sent directly from the extension to your account-scoped storage on Supabase over an encrypted connection. Payments for Pro are processed by Stripe on our website; we never see or store your full card details.

Sub-processors. We rely on a small set of vetted providers strictly to deliver these features: Supabase (authentication, database, and realtime sync for Pro), Stripe (payment processing for Pro), and Resend (transactional email and the opt-in analytics/feedback digests). Each processes only the data needed for its function.

Limited Use Disclosure

Orbit Station's use of any information received from Google APIs — both the Chrome extension APIs listed under "Permissions We Request" and, for Pro users who opt in, the basic profile information (openid email profile) received when you sign in with Google — adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:

• We use the data only to provide the user-facing features described in this policy.
• We do not transfer or sell user data to third parties.
• We do not use user data for personalised advertising, credit-worthiness assessment, or lending purposes.
• We do not allow humans to read user data, except where you have explicitly chosen to send us a free-text comment in the uninstall feedback survey.

Data Retention & Your Choices

• Local data: stored on your device until you uninstall the extension or use Settings → Data → "Reset all data". You can also export your full configuration as JSON at any time.
• Analytics events queued locally: capped at the 200 most recent events. Cleared after upload or when you toggle analytics off.
• Email contents: activation digest emails and uninstall feedback emails are retained in our private inbox for product improvement; they contain no PII and no data linkable to you. Contact us at support@orbitstation.app if you want a specific submission deleted.
• Synced cloud data (Pro): kept while your account is active so it stays in sync across your devices. You can erase it at any time with Settings → Sync → "Delete my cloud data". After you cancel Pro or delete your account, synced data is permanently removed within 30 days.
• Account & portability: you can export your data as JSON at any time (right to portability) and delete your account and all associated cloud data on demand (right to erasure). Deleting your account also revokes your active sessions.

Single Purpose

Orbit Station's single purpose is to replace the browser's new tab page with a configurable workflow launcher: organise links into workspaces, group multiple URLs into one-click "tab stacks," search and launch them via a keyboard-first command palette, and access supporting tools (notes, todos, focus timer) from the sidebar. All listed permissions and the optional features above exist solely to support this single purpose.

Compliance Statements

• We do not sell your data to third parties.
• We do not use or transfer data for purposes unrelated to the extension's single purpose.
• We do not use or transfer data to determine credit-worthiness or for lending purposes.
• We do not serve advertising of any kind.

Children's Privacy

Orbit Station does not knowingly collect any information from children under 13. The Free tier does not require an account, sign-in, or any personal information. The optional Pro cross-device sync feature requires Google sign-in and is intended for adults; it is not directed to or marketed to children.

Changes to This Policy

We may update this privacy policy when the extension's data behaviour changes. Material changes will be reflected here with an updated "Last updated" date. We do not maintain an email list and therefore cannot notify users individually; please re-read this page after major version updates.

Contact

Questions or data deletion requests: support@orbitstation.app — or use the form at orbitstation.app/support.

See also our Terms of Service, which govern use of the Pro subscription.