Privacy Policy - Nook
Legal

Privacy Policy

Last updated: August 6, 2026

The short version: Nook is local-first. Your tabs, sessions, bookmarks, and wallpapers stay on your device by default. We don't track your browsing, we don't sell data, and cloud sync only happens if you turn it on.

1. Who we are

Nook ("we", "us", "our") is a Chrome extension that turns your new tab into an organized workspace. This policy explains what data Nook handles, why, and the control you have over it.

2. Data we store on your device

By default, everything Nook creates lives locally in your browser using Chrome's storage APIs. This includes:

  • Saved sessions - the windows and tabs you choose to save.
  • Bookmarks and boards - the boards you create, and for each bookmark: its URL, page title, and favicon (site icon), so it can be displayed in your boards.
  • Tab groups - the topic clusters Nook generates.
  • Preferences - your wallpaper, layout, and display settings.

This data never leaves your machine unless you explicitly enable cloud sync.

3. Tab grouping (on-device)

Nook may cluster your open tabs by topic to help you stay organized. This grouping happens locally on your device and does not send your tab titles or URLs to any external service. (See Section 4 for the one Nook feature that does send data externally, and only if you opt in.)

4. AI Daily Insight (optional)

Nook includes an optional AI Daily Insight feature that is off by default. If you enable it and supply your own Anthropic API key, Nook sends the titles and hostnames of pages you've visited to Anthropic's API to generate your daily report - this is the only feature in Nook that sends your browsing data anywhere. Nothing is collected or sent unless you've both turned the feature on and entered your own key. See Anthropic's privacy policy for details on how they handle this data.

5. Cloud sync (opt-in)

If you enable sync, your saved sessions, bookmarks, boards, and preferences are encrypted and stored with our backend provider, Supabase, so they can be restored on your other devices. Sync is off by default and required for nothing else Nook does. You can disable it at any time, which stops further syncing immediately.

6. Account & Sign-In

When you sign in with Google, we collect your name, email address, and profile picture to create your Nook account and enable cloud sync. We also store an authentication token from Google and a session token from Supabase so you stay signed in - these tokens identify your session and do not give us access to your Google account beyond what you approve during sign-in. All of this is stored securely via our backend provider, Supabase.

7. Trial & subscription status

We store your trial start date and current subscription status (trial, active, or expired) via Supabase so Nook knows which features to unlock. This is used only to determine your access to Pro features.

8. Payments

If you upgrade to Nook Pro, your email address is shared with Paddle.com, our payment processor and Merchant of Record, to process your subscription. Nook does not collect or store your card details - all payment processing is handled directly by Paddle. See Paddle's privacy policy for details on how they handle payment data.

9. Technical & log data

Like most online services, our infrastructure providers automatically log basic technical information as part of handling requests - such as IP address, browser type, and device information. Cloudflare hosts nooktab.com and our checkout page, Supabase hosts our backend, and Paddle processes payments; each may log this information as a normal by-product of serving requests, and Nook's pages also load fonts directly from Google Fonts. If you enable the optional AI Daily Insight feature, Anthropic's API may see similar technical information as a by-product of that request. We don't use any of this to profile you, and we don't combine it with your account data beyond what's needed to keep the service running securely.

10. What we do not do

  • We do not sell, rent, or share your data with advertisers.
  • We do not track your browsing history across sites.
  • We do not inject content scripts that read the pages you visit.
  • We do not upload your wallpaper images - they stay on-device.
  • No analytics, tracking, or crash-reporting services. Your browsing data is never sent to us or any third party - the only exception is the optional AI Daily Insight feature (Section 4), which requires you to supply your own Anthropic API key and explicitly enable it before any data is collected or sent.
  • We do not use your data to determine creditworthiness or loan eligibility.
  • We do not use your data for anything beyond providing and improving Nook.

11. Your controls

  • Delete everything - one click removes all local and synced data, immediately.
  • Export - download your sessions as a portable file at any time.
  • Disable sync - keep Nook fully local whenever you prefer.
  • Access or correct your data - email us and we'll help you review or fix your account information.

12. Data retention

Local data persists until you delete it or remove the extension. Synced data is deleted from our servers within 30 days of you turning off sync or requesting deletion, and cloud data from an expired trial is removed automatically within the same window. Payment and transaction records may be retained longer where we're required to by law, such as for tax and accounting purposes.

13. Children

Nook is not directed to children under 13 and we do not knowingly collect data from them.

14. Changes to this policy

If we make material changes, we'll update the date above and, where appropriate, notify you in the extension. Continued use after an update means you accept the revised policy.

15. Contact

Questions about privacy? Email us at hello@nooktab.com and we'll respond within two business days.