Last updated: October 26, 2026
Microsoft Edge users install Orbit Station from Microsoft Edge Add-ons. This policy covers Orbit Station for Microsoft Edge, which starts with version 1.9. It is the Microsoft Edge edition of our main privacy policy: the extension stores, sends and syncs the same data, and this page describes it for Microsoft Edge. Microsoft Edge installs each new version of Orbit Station automatically once Microsoft Edge Add-ons publishes it.
Orbit Station is local-first: everything you create is stored in Microsoft Edge on your device, and the Free features need no account. The one value kept outside this browser by Microsoft Edge itself is a “used Orbit” flag in Microsoft Edge’s own sync storage, which Microsoft Edge carries between your computers through your Microsoft account when Edge sync is on, and which never reaches us (see What We Store on Your Device). While you use Orbit, the only outbound requests by default are site icons: to show a logo on each saved link (including tabs and bookmarks you import), the extension asks DuckDuckGo’s public icon service (icons.duckduckgo.com) for that site’s icon, which shares the site’s domain name (for example github.com) — never the full URL, your identity, or anything you wrote. Open tabs, recently closed tabs and bookmarks that Orbit only lists (in the sidebar, the Import screen, onboarding, the Orbit side panel and its tab search) are shown with a generic icon drawn on your device, so listing them sends nothing. Importing a file from another browser is not part of the Microsoft Edge version. The features below are off by default and send nothing until you turn them on or choose to use them. The one exception is the uninstall-survey link (item 4): it tells us only the extension version, and the few rough details it also carries reach us only if you submit the survey. Each is disclosed in full further down:
#), so they reach us only if you submit the survey, together with your answers. From version 1.9.2, the details also say whether you ever launched a stack on that device (yes or no).Free needs no account, and apart from the icon lookups above, what you create stays in Microsoft Edge on your device. Pro sync is opt-in — it only runs after you sign in and either turn it on or buy Pro from inside the extension, and you can turn it off at any time. We never run advertising and never sell your data. Ever.
All your settings, workspaces, links, notes, to-dos, and preferences live in Microsoft Edge’s extension storage on your device (storage.local); wallpaper images you upload are kept in the extension’s own IndexedDB storage. On Free, this data never leaves your device unless you export it as a JSON file or turn on one of the optional features below — by default, the only part of it sent anywhere is each saved link’s domain name, for its icon. If you uninstall and choose to submit the survey, a few rough details about how you used Orbit go with your answers (section 4). If you turn on Pro cross-device sync, the data listed in section 5 below is also stored in your cloud account.
One value in Microsoft Edge’s sync storage. Once Orbit’s new tab has opened (after any setup steps), it stores the number 1 under the name orbit-used in storage.sync, Microsoft Edge’s own storage that follows your Microsoft account when Edge sync is on. It holds nothing else: no ID, links or settings. Microsoft Edge carries it between your own computers through that account; it never reaches us, and it is not Orbit’s Pro sync. Each Orbit page checks it before writing, so it is written only once. When you install Orbit on another computer signed in to the same Microsoft account, Orbit reads it at install to skip the first-run welcome tab and, up to version 1.9.1, start on the Galaxy look. From version 1.9.2, a second computer starts on the Clean look with the light starter set and no setup steps. Microsoft Edge deletes it when you uninstall Orbit.
Clean-up history. When you use Stack all & close or Close duplicates, Orbit keeps a record of the tabs it closed (their titles, addresses, pinned state, position and the browser’s temporary number for each tab, which only lets Undo skip a tab that is still open) under the name orbit-cleanup-snapshots in storage.local, so you can undo, or reopen them later from “Recently cleaned” in the side panel. Only the 10 most recent clean-ups are kept; older ones are deleted as new ones are made. This history stays on your device: it is never synced, never sent to us and never included in the exported configuration file or, from version 1.9.1, in a backup file. Tabs in InPrivate windows are never included. You can remove any entry in Recently cleaned, remove all of them in Settings → Privacy → “Forget clean-up history”, and uninstalling Orbit deletes them all.
Files from other browsers. Importing a file from another browser is not part of the Microsoft Edge version. Orbit for Microsoft Edge never asks for another browser’s files.
If you use the extension without signing in (every Free feature works that way), it does not send us, and we do not store on our servers:
If you sign in (needed only for Pro), we store your Google account details and billing status, and with sync turned on, the data described in section 5, all linked to your Google email and account ID. On any plan, we never use tracking cookies, fingerprints or advertising identifiers. Our analytics and feedback endpoints do not log IP addresses; our hosting, sign-in and payment providers (Vercel, Supabase, Stripe) may record IP addresses in their own security logs.
Orbit Station requests the following Microsoft Edge extension permissions, each tied to a specific user-facing feature. bookmarks and sessions are optional: Microsoft Edge asks you for them only when you use the feature that needs them. None are used for background monitoring. The background worker reads your saved workspaces only when you press one of its keyboard shortcuts or choose an item in the Orbit icon’s right-click menu, and once when Microsoft Edge installs Orbit: it checks whether this browser profile already holds Orbit data and reads the orbit-used flag (see What We Store on Your Device) to choose the first-run experience. To keep the uninstall-survey link (section 4) up to date, it uses only a few saved values: your current view, your current look, whether setup is finished and the install date. From version 1.9.2 it also reads whether you ever launched a stack on this device: Orbit’s own launch count and, only if that shows no launch, the analytics events still waiting on your device from before 1.9.2. These are read on your device and never sent. When a keyboard shortcut launches a stack, the worker adds one to that count. Those details reach us only if you submit the survey. Each time Orbit’s new tab opens or you come back to it, it checks the tabs open in its own window, on your device, and keeps only how many could be saved, to decide whether to suggest saving them as a stack when 15 or more are open. If you allow Orbit in InPrivate, it still never lists, counts, saves or closes tabs from InPrivate windows.
storage.local, plus the one orbit-used flag in storage.sync described above. It also keeps the clean-up history described above in storage.local, and two short-lived values in storage.session, which Microsoft Edge clears when it restarts: which button or menu item opened the side panel, and a random ID for the current browser session, so that reopened tabs go back to the right window.
search.query). We do not change, override, or read your search settings. The command palette’s Ask AI rows don’t use this; they open the AI site you pick (see Pages We Open for You).
openid, email, profile) and never request access to Gmail, Drive, Calendar, or any other Google service. Free features never ask you to sign in, and users who never sign in are unaffected.
Items 1, 2, 3 and 5 are opt-in and off by default. Item 4, the uninstall survey, opens for everyone when you uninstall: its link tells us only the extension version, and your answers and the rough details in the link are sent only if you submit the survey. Item 6, the day-7 feedback page (from version 1.9.2), sends nothing unless you press Send.
Status: off by default. Turn it on in the Weather widget (Tools sidebar) or in Settings → Privacy.
What is sent: your latitude and longitude, rounded to 2 decimal places (about 1 km), to Open-Meteo’s forecast API (api.open-meteo.com) — or, if you type a place name instead, that place name, exactly as you typed it, to Open-Meteo’s geocoding API (geocoding-api.open-meteo.com) to look up its coordinates, which are rounded the same way before the forecast request. Microsoft Edge is asked for your location only when you haven’t typed a place. Open-Meteo is a free, open-source weather API that does not require an API key.
What is kept: the last forecast, the place name you typed and your °F/°C choice, on your device only. From version 1.9.1, the place name also goes into a backup file if you tick “Include my weather place” when you back up. We never receive your location.
When it is sent: only while Weather is on: when the new tab page or the Weather widget needs a fresh forecast (the last one is more than 30–60 minutes old), when you press refresh, or when you change the location.
How to revoke: toggle Weather off in Settings → Privacy. The location permission can also be revoked in Microsoft Edge’s site permissions.
Status: off by default, and used only by the Galaxy look. Toggle in Settings → Privacy. When off, or on any other look, the backdrop is drawn on your device (the Photo look’s landscapes ship inside the extension) and makes no network requests.
What is sent: a single image request to Picsum Photos (a free image CDN) containing only a date-based seed (e.g. orbit-2026-07-20) and the requested resolution. No account, no cookies set by us, no personal data.
When it is sent: at most once per day per open new tab, when the wallpaper loads.
How to revoke: toggle off in Settings → Privacy; the extension immediately falls back to the local gradient backdrop.
Status: off by default. Toggle in Settings → Privacy.
What is sent (only when enabled, at most once per 24 hours, in batches of up to 50 events; a failed upload is retried an hour later at the earliest):
1.9.0)session_start, stack_launched, day_n_active), each with its timestamp and the day number since installWhat is never sent: URLs, page titles, bookmark contents, note text, todo text, workspace names, search queries, or any browsing activity, the titles or addresses of your open tabs, what you typed to find a tab, or anything from a file you import. Our events endpoint does not record or store IP addresses.
Where it is stored: in a private table in our database (hosted by Supabase) that only our server can read; no public or signed-in access. Before storing, the random instance ID is replaced with a one-way hash that cannot be turned back into the ID; we use it only to count distinct installs. Each row holds the event name, the extension version, the day it happened, the day number since install and the simple details above. If storing fails, we email ourselves only the number of events of each type in that batch, labelled with the first 12 characters of the same hash rather than the ID.
Why we collect it: to measure activation friction (e.g. how many users complete the first stack) so we can fix the onboarding for everyone. Aggregate use only.
How to revoke: toggle off in Settings → Privacy and nothing further is sent. Events recorded while sharing is off are never sent, even if you turn it back on later: turning it on deletes them from your device first.
Status: when you uninstall, Microsoft Edge opens orbitstation.app/why-uninstall in a new tab, for everyone, whether or not analytics is on. Its link looks like ?v=1.9.0#d=7-29&view=grid&skin=clean&setup=y&store=edge. The part before the # is the only part Microsoft Edge sends to us when the page opens, and it carries only the extension version. The rough, anonymous details after the # are in the part of the link that browsers do not send to any server: they stay in your browser, and reach us only if you submit the survey. The link holds:
v: the extension version (before the #)d (after the #): about how long Orbit was installed, as one of 0, 1, 2–6, 7–29 or 30+ daysview (after the #): the view you used (grid, list, galaxy or board; “other” if it was none of these, or “none” if no new tab was opened yet)skin (after the #): the look you used: one of clean, space (Galaxy), focus, photo, paper or contrast (High contrast)setup (after the #): whether you finished the setup steps (y or n)store (after the #): edge, so the page shows its Microsoft Edge textact (after the #, from version 1.9.2): whether you ever launched a stack on that device (y or n). Nothing else about your stacks is in it.Nothing else is in the link: no ID, name, email, links, page titles, notes or search terms. Loading the page shares only the extension version with us (the page also loads its fonts from Google Fonts); no answers and none of the rough details are sent unless you pick a reason and click submit.
What is sent: a single reason code from a fixed enum (e.g. missing-feature, too-slow, want-default-tab, too-busy), an optional free-text comment if you write one, an optional “Switching to” answer (up to 80 characters; both are stored as you typed them), the rough details from the link listed above (read from the link in your browser at that moment), the extension version, and the time of submission. Your answer is stored with those details in the same private database table as the analytics events (with no instance ID) and emailed to our private inbox.
Follow-up question (from October 2026, for every version): if your reason is “Too complex / overwhelming” or “Too busy / not my style”, the page asks one optional question: “What felt like too much?” You pick one fixed answer, such as “The look picker”, “Too many features” or “Other”. Your pick is sent with your other answers, and only if you submit the survey.
How to skip: close the page or do not click submit. No answers or rough details are sent without an explicit click.
Status: off by default. Available only on the Pro plan, and only after you choose “Sign in with Google” in Settings → Sync across devices and either turn on “Enable cloud sync” or buy Pro from inside the extension, which turns sync on once the subscription is active (you’ll see “Cloud sync is now on”). You can turn it off at any time. Features that don’t need Pro never ask you to sign in, and nothing syncs without Pro.
What is stored: the contents you create in the extension — your galaxies, workspaces, saved links and tab stacks (with their URLs and titles, including bookmarks and tabs you imported and windows you saved with Session Capture or with Stack all & close), notes, to-dos, boards (including the Reading board), calendar entries, your daily focus, focus-timer settings and session count, planet positions, links between items, and your settings (including the name you entered for the greeting, and your chosen look and its options, such as the High contrast settings). A stack also keeps each tab’s title (and whether it was pinned), which syncs with the stack. It also includes your Team profile name, teammates you added and your share history, and any email-account labels and addresses saved by an earlier version (the email feature is currently hidden). Your read-later list is synced too. Weather data, uploaded wallpaper images, analytics events and the clean-up history are not synced. This is stored in your own account-scoped rows so it can sync to your other signed-in devices.
Who can see it: every row is protected by row-level security so only your signed-in session can read or write it through the app. Our administrators have technical access to the database for operations but do not view your content except at your request or where required by law.
Where it is stored: Supabase (Postgres), in the United States (us-east-1), encrypted in transit (TLS) and at rest.
Account identity: your Google account email and name (and the profile-photo link Google includes), plus a unique account ID, used solely to authenticate you and associate your data with your account. We request only the openid email profile scopes.
Billing status: if you subscribe, your plan, trial and billing-period dates, and your Stripe customer and subscription IDs are stored with your account so the extension can unlock Pro.
Other browsers on the same computer: Orbit’s local data is kept per browser. Orbit in Microsoft Edge does not read Orbit’s data in another browser on the same computer, except through Pro sync if you turn it on, with the same account and the same synced data.
How to revoke: turn off “Enable cloud sync” to stop syncing, sign out, or use “Delete my cloud data” in Settings → Sync across devices to permanently erase your synced data and account. See Data Retention below.
Status: about a week after a new install, Orbit’s home may ask once how it is going, with three answers. Installs from before version 1.9.2 are not asked. If you pick one, Orbit opens orbitstation.app/feedback in a new tab. Its link looks like /feedback#v=1.9.2&a=just-right. Orbit opens this page only once. In Microsoft Edge, the page’s privacy link leads to this policy.
What is in the link: the extension version (v) and your answer (a): just-right, too-busy or not-useful. Both are after the #, in the part of the address that browsers do not send. They stay in your browser. Opening the page sends us nothing about you (the page also loads its fonts from Google Fonts).
What is sent: nothing, until you press Send. Then we receive the extension version, your answer, an optional comment if you write one (up to 500 characters, stored as you typed it) and the time you sent it. They are stored in the same private database table as the uninstall answers, with no instance ID. If they cannot be stored, they are emailed to our private inbox instead. They are kept for product improvement, like the uninstall answers (see Data Retention).
How to skip: do not pick an answer, or close the page without pressing Send.
Optional analytics, uninstall feedback and (from version 1.9.2) day-7 feedback are received by serverless API endpoints we operate (api/events, api/uninstall-feedback and api/day7-feedback). They are stored in a private table in our Supabase database that only our server can read (there is no public or signed-in access to it). Uninstall answers, (from version 1.9.2) day-7 answers that cannot be stored, and the per-type event counts of any analytics batch that cannot be stored, are also emailed to a private inbox via Resend (our transactional email provider). We do not share this data with third parties or use it for advertising. Resend processes the message in transit only; we do not retain server logs of payload contents.
Open-Meteo (its forecast and geocoding APIs) is contacted directly from your browser when the weather widget is enabled, and Picsum Photos is contacted directly from your browser when the daily photo wallpaper is enabled. We do not proxy or log those requests.
If you enable Pro cross-device sync, your content is sent directly from the extension to your account-scoped storage on Supabase over an encrypted connection. Payments for Pro are processed by Stripe on our website; we never see or store your full card details. When you start checkout from the extension, your account ID and email are passed in the address of our checkout page on orbitstation.app so Stripe can link the subscription to your account.
If you contact us through the support form or by email, we receive the name, email address and message you send and use them only to reply. Support-form messages are delivered to our inbox via Resend.
Sub-processors. We rely on a small set of vetted providers strictly to deliver these features: Vercel (hosting for orbitstation.app and the API endpoints above), Supabase (authentication, database, and realtime sync for Pro, and the private table for analytics events and uninstall answers), Stripe (payment processing for Pro), and Resend (transactional email such as the reminder before a Pro trial ends, support messages, and the opt-in analytics/feedback digests). Each processes only the data needed for its function.
Some actions open a web page in a new tab. The site that serves the page receives what is in its address, under its own privacy policy:
orbitstation.app/why-uninstall with the extension version in the part of the address sent to us. A few rough, anonymous details (about how long you had Orbit, which view and look you used, whether you finished setup, and that the browser is Microsoft Edge) follow the #, which browsers do not send, so they reach us only if you submit the survey. From version 1.9.2, they also say whether you ever launched a stack on that device. If you submit it we receive your reason, optional comment, optional “Switching to” answer, your optional follow-up answer (from October 2026), those details, the extension version and a timestamp (see section 4).orbitstation.app/feedback. The version and your answer follow the #, which browsers do not send. They reach us only if you press Send, with any comment you write (see section 6).orbitstation.app/whats-new?store=edge. The store=edge part only makes the page show its Microsoft Edge text; the address carries nothing about you.edge://extensions/shortcuts). It is a page inside your browser; nothing is sent to us.Orbit Station applies these commitments to everything it handles: the data the Microsoft Edge permissions listed under "Permissions We Request" give it access to and, for Pro users who opt in, the basic profile information (openid email profile) received from Google APIs when you sign in with Google. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
Orbit Station for Microsoft Edge follows the Microsoft Edge Add-ons developer policies.
orbit-used flag in Microsoft Edge’s sync storage. The clean-up history is kept until newer clean-ups push entries out (10 at most), you remove them, or you uninstall.Orbit Station’s single purpose is to be a launcher that saves, finds and relaunches your sites and tabs as stacks: on the new tab page, in Microsoft Edge’s side panel and from keyboard shortcuts. You organise links into workspaces, group URLs into one-click “tab stacks”, save your open tabs as a stack and reopen them, find an open tab, and launch any of them from a keyboard-first command palette, with supporting tools (notes, to-dos, focus timer). All listed permissions and the optional features above exist solely to support this single purpose.
Orbit Station does not knowingly collect any information from children under 13. The Free tier does not require an account, sign-in, or any personal information. The optional Pro cross-device sync feature requires Google sign-in and is intended for adults; it is not directed to or marketed to children.
We may update this privacy policy when the extension's data behaviour changes. Material changes will be reflected here, and in the main privacy policy, with an updated "Last updated" date. We do not maintain an email list and therefore cannot notify users individually; please re-read this page after major version updates.
Version 1.9 (October 2026) is the first version of Orbit Station for Microsoft Edge. The main privacy policy also covers it, and lists the changes made in earlier versions.
Version 1.9.1 replaces “Export configuration (JSON)” with “Back up everything (JSON)”, which saves everything you made in Orbit to one file on your computer, as described under Data Retention, and adds “Restore from a backup…” with a preview and a 24-hour Undo kept on your device. Nothing new is sent anywhere, and no permission is added.
Version 1.9.2 adds one detail to the uninstall-survey link after the #: whether you ever launched a stack on that device (yes or no). Like the other details, it reaches us only if you submit the survey. On a new install, version 1.9.2 may also ask once, about a week in, how Orbit is going, and opens orbitstation.app/feedback if you answer (section 6). Your answer stays in the page address and is sent only if you press Send. A second computer on the same Microsoft account starts on the Clean look with the light starter set and no setup steps. Launching a stack switches to its pages that are already open, checked on your device, and a new install’s home counts the tabs in its own window, keeping only the number. Nothing new is sent unless you submit the survey or press Send. No permission is added.
In October 2026 the uninstall survey page added one optional follow-up for every version, “What felt like too much?”, after “Too complex / overwhelming” or “Too busy / not my style”. Your pick is sent only if you submit the survey.
Version 1.9.3 adds a choice of the day your calendar week starts, kept on your device. Nothing new is sent anywhere, and no permission is added.
Questions or data deletion requests: support@orbitstation.app — or use the form at orbitstation.app/support.
See also our Terms of Service, which govern use of the Pro subscription, and our main privacy policy.
© 2026 Omnivurse Technologies. All rights reserved.