Privacy Policy

The data Tabgoat handles

When you install Tabgoat, the extension creates an anonymous account for you automatically — a random ID with no name or email attached. Everything below is tied to that anonymous ID, not to you personally, unless and until you choose to sign in.

• An anonymous account ID — a random identifier created on install so your points have somewhere to live. It contains no personal information.
• Ad impressions — a count of when a sponsored slot was actually visible to you for five seconds. This is how points are earned and how we keep the ad count honest for sponsors.
• Ad clicks — a count of when you click the sponsored slot, used to award points and measure interest.
• Your points balance — calculated on our server from the impressions and clicks above.
• Your email address — only if you choose to sign in with Google to redeem rewards. Until that moment, we never have it.

Your settings — like which AI tool or search engine you prefer in the Ask bar — are stored in your own browser (via Chrome's sync storage) and are not sent to us.

The lines we don't cross

• We don't track your browsing. Tabgoat only runs on its own new-tab page. It does not read, record, or monitor the websites you visit.
• We don't read your searches or prompts. When you use the Ask bar, it sends you directly to the tool you chose (Claude, Google, etc.). Your query goes to that provider, not to us — we never see or store it.
• We don't sell or share your data with advertisers or anyone else for their own marketing.
• We don't require an account to use the extension. You can use Tabgoat and earn points without ever giving us a name or email.

How the data is used

Every piece of data above exists to do one of three jobs: run the points system honestly, keep the ad count accurate for the sponsors who make Tabgoat free, and — only if you opt in — let you redeem rewards. We don't use it for profiling, resale, or advertising targeting based on your personal identity.

Sponsors are told aggregate numbers — how many times an ad was seen and clicked — never your individual identity or activity.

When you choose to sign in

Tabgoat uses Google Sign-In for one purpose: to verify who you are when you redeem rewards, so points can't be farmed by bots. When you sign in, Google shares your email address and basic profile (like your first name) with us. We use the email as your verified identity and to contact you about a redemption. That's it.

Signing in is entirely optional and only needed at the moment you want to turn points into a reward. If you never redeem, you never need to sign in, and we never receive your email.

Storage & service providers

We keep data only as long as needed to run your account and the rewards program. We rely on a small number of trusted providers to operate:

• Supabase — stores the account, points, and ad-event data.
• Vercel — runs the server functions that calculate points and serve ads.
• Google — provides optional sign-in at redemption.

These providers process data on our behalf under their own security and privacy terms. We don't place your data anywhere it isn't needed to make Tabgoat work.

Your control over your data

• Use it anonymously. Install, earn points, and never share a name or email.
• Uninstall anytime. Removing the extension stops all collection.
• Request deletion. Email us and we'll delete your account and associated data.

Updates and getting in touch

If this policy changes in a way that affects what we collect or how we use it, we'll update the date at the top and, for significant changes, note it in the extension. Questions, data requests, or anything else:

Contact: REPLACE_WITH_CONTACT_EMAIL