Privacy Policy
Effective and updated: October 13, 2026 · OriaTab 0.1.0
Your settings and personal content are primarily stored locally. Online features send necessary content directly to the services you choose. We do not sell your personal data.
1. Scope
This policy covers the OriaTab browser extension (current version 0.1.0 for desktop Chrome and Microsoft Edge) and www.oriatab.cn. The developer is KrisLee (GitHub: KrisLee1). OriaTab provides a new tab page, search, website shortcuts, bookmark browsing, saved tab groups, wallpapers, a calendar, and Aide AI and translation features.
No OriaTab account is required. The current extension has no developer-operated user-data server, advertising, or behavioral analytics. Local storage does not mean online features make no network requests. This policy explains what stays in your browser and what is sent to the services you choose.
2. Data and purposes
| Data | Purpose and handling |
|---|---|
| Settings and personal content | Themes, search engines, Dock shortcuts, saved tab groups (titles and URLs), language and preferences are stored in browser local storage. Uploaded wallpapers are stored locally in IndexedDB, with no upload to the developer. |
| Bookmarks, tabs and history | After permission is granted, bookmarks are read for browsing and search; current-window tab titles, URLs and groups are read for saving and restoring groups. Browsing history is matched locally only after you enable history search and grant permission. The developer does not receive your bookmark tree or browsing history. Visiting websites or loading their icons still makes requests to those sites. |
| Aide conversations and images | Conversation history and attached images are stored locally, currently with a maximum of 30 historical conversations. Sending a request transmits your prompt, relevant conversation context, and attached text or images to your selected model service. Long conversations may trigger a summary request to that service. |
| Webpage content | When you invoke Aide on a webpage, relevant requests can include its title, URL and relevant visible text. The model can read more of that same page by keyword or segment. Page excerpts are not written to raw chat history, but explicitly selected quotations, URLs or model responses may appear in local conversations. Online translation services receive selected or entered text; model translation may also receive relevant page context. |
| API credentials | Your model, translation and search API keys and service settings are stored in browser local storage. Credentials are kept separate from public settings and chat history, not uploaded to the developer, and used to authenticate requests to the selected service. This storage is not a separately encrypted password vault. |
3. Online features and third parties
Your browser sends requests directly to the services needed for the feature. Recipients may receive your IP address, request time, browser or HTTP metadata, and the data needed to fulfill the request. Their own policies govern retention and subsequent handling.
- Search: query text is sent to your browser's default, built-in or custom search engine. Aide web search sends queries to enabled search sites or configured API platforms and may query multiple sources concurrently.
- AI and translation: invoking these features sends required content and authentication information to your selected model endpoint or configured translation service, such as Youdao, Baidu, Volcengine, Google or DeepL. Review the policies of the services you actually use; they may process data outside your region.
- Wallpapers: online galleries such as Bing, Wikimedia Commons and NASA receive searches, region parameters, pagination or image requests. Selected online wallpapers may be requested when a new tab opens or automatic rotation runs; caches reduce repeat requests.
- Website icons and titles: with HD icons enabled and permission granted, the extension can request site pages, icons, Web Manifests or their declared CDNs. Adding a URL to a group can request its page title. These requests reveal the requested resource and ordinary connection metadata.
- Calendar: public holiday data for your selected region and year is fetched from Nager.Holidays or holiday-cn via jsDelivr or GitHub and cached locally. These requests do not require bookmarks, conversations or browsing history.
OriaTab does not upload this content to a developer-operated server, sell personal data, use it for advertising or advertising profiles, or train the developer's own general-purpose AI models. Third parties you select may have different data practices.
4. Browser permissions
storagesaves preferences, configuration and history;favicondisplays browser-provided website icons.contextMenus,activeTabandscriptingshow Aide when invoked through a context menu or shortcut and handle selected content and current-page context. There is no permanent content script installed on all webpages.- Optional
bookmarksenables bookmark browsing and search;tabsandtabGroupsenable window saving, opening pages and native group restoration;searchuses the browser default search engine;historymatches browsing history when history search is enabled. - Optional HTTP(S) host permissions enable site icons and titles, online wallpapers, search, AI, translation and image reading. Some services request access per origin; HD icons can request access to all HTTP(S) sites. Broad permission does not by itself send every page's content, but permits access to authorized origins.
You can review or revoke optional permissions in the browser's extension management page, which may disable related features. New tab replacement is managed by the browser's extension settings.
5. Retention, deletion and security
Local content remains until you delete it, a feature's retention limit replaces it, or you uninstall the extension. You can delete Dock shortcuts, saved groups, custom wallpapers and Aide history entries. Deleting a conversation removes its associated historical images. Removing a configured model or search API platform removes its associated credential. Disabling history search or revoking permission stops that access.
Uninstall OriaTab to remove all extension-local data. Files you exported or copied, existing browser bookmarks and history, and data already received by third parties are not deleted by uninstalling. Contact the relevant service to request deletion of third-party data.
Production model, translation and search API endpoints use HTTPS; local HTTP model endpoints are supported as an exception. Resource requests omit cookies and referrer information where possible. Security also depends on your device, browser and chosen services. Protect your device and API keys, and avoid sending sensitive content to untrusted endpoints.
6. Chrome Web Store Limited Use
OriaTab's use of information received from Chrome APIs or Google APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. This information is used only to provide or improve the user-facing features described in this policy, not for personalized advertising, sale to data brokers, creditworthiness assessment, or unrelated purposes.
Transfers are limited to those necessary to fulfill the feature you request and other circumstances permitted by the applicable policy. The developer does not receive or manually review your local bookmarks, browsing history or conversations through an OriaTab server.
7. Website visits
The official website is a static site hosted by Cloudflare. It has no custom analytics scripts, advertising tracking, accounts or site cookies, and does not read extension data. Cloudflare may process visitor IP addresses, requested URLs, timestamps and HTTP information to deliver pages, secure the network and prevent abuse, and may retain access or security logs according to its service configuration. See the Cloudflare Privacy Policy.
Following GitHub or other external links subjects your visit to those websites' own privacy policies.
8. Contact and changes
For privacy questions or data handling requests, contact the developer through OriaTab GitHub Issues. Issues are public. Do not post API keys, private conversations, complete browsing records or other sensitive information.
We update this page and its revision date when features or data practices change. New behaviors requiring permission or authorization will still be presented through the relevant product and browser flows.