Tubar is a bookmark-toolbar extension that syncs your personal bookmark bar across browsers. Your bookmark contents are encrypted on your device before they ever reach our servers — we store the encrypted blobs but cannot read them.
Summary
- We collect your account email (so you can log in) and end-to-end-encrypted bookmark data (so it can sync across your devices).
- Your bookmark contents are encrypted on your device before they reach our servers. We store those encrypted blobs but cannot read them.
- We do not collect your browsing history or track what you bookmark. The Tubar product runs no analytics, third-party SDKs, ads, or tracking pixels. (The public marketing site, tubar.app, uses privacy-respecting Google Analytics for aggregate visitor counts only — it never sees your account or your bookmarks. See “Marketing website” below.)
What we collect
Account email
When you create an account, we store the email address you sign up with. It is used solely to authenticate you and to send essential account communications (e.g. password reset). It is never sold, rented, or shared with advertisers.
Encrypted bookmark data
Your bookmarks — URLs, titles, folder structure, colors, and ordering — are stored on our sync servers only as encrypted blobs. Encryption and decryption happen locally, inside the extension, on your device. The server receives ciphertext and returns ciphertext. It has no access to the plaintext contents of your toolbar.
What we do NOT collect
- No browsing history. Tubar does not record, transmit, or analyze the pages you visit. Although the extension runs on every page to render your toolbar, it does not report the page’s URL, content, or your activity anywhere.
- No analytics or telemetry in the product. The Tubar extension does no usage tracking, event logging, or behavioral profiling. (Aggregate visitor analytics run only on the public marketing website — see below.)
- No third-party SDKs in the product. The Tubar extension does not bundle advertising, analytics, or social-media tracking libraries.
- No ad pixels or fingerprinting.
Marketing website
The public marketing pages at tubar.app (the homepage, features, pricing, and this policy) use Google Analytics 4 to measure aggregate visitor traffic — page views, referrers, and approximate region. It is configured with advertising and personalization signals disabled. This is entirely separate from the Tubar product: it runs only on these public pages, never inside the extension, and it never has access to your account or your bookmark data.
Zero-knowledge architecture
Tubar is built so that we cannot read your bookmarks, by design:
- Your bookmark data is encrypted on your device using a key derived from your password.
- Your password is never sent to our servers. Authentication uses a zero-knowledge scheme; the server never receives, stores, or can recover your password.
- Because the encryption key never leaves your device, the encrypted blobs we store are unreadable to us, to any employee, and to anyone who might compromise the server.
The practical consequence: if you lose your password, we cannot recover your bookmark contents for you, because we never had the means to read them.
How we use your data
- Email → authentication and essential account notices only.
- Encrypted bookmark blobs → stored and synced so your toolbar is available on every device where you log in.
We do not use your data for advertising, profiling, model training, or resale.
Third-party services
If you choose to import bookmarks from raindrop.io, the extension communicates with raindrop.io’s API using credentials you provide, solely to fetch the collections you ask to import. Tubar does not share your data with raindrop.io beyond what that import requires. Your use of raindrop.io is governed by raindrop.io’s own privacy policy.
Data retention
We retain your account email and encrypted bookmark blobs for as long as your account is active. Encrypted blobs are updated as you change your toolbar; prior versions are not retained beyond what is needed to provide reliable sync.
Data deletion
You can delete your account at any time. On deletion, your account email and all associated encrypted bookmark blobs are permanently removed from our servers. To request deletion, contact us at the address below.
Children’s privacy
Tubar is not directed to children under 13 and does not knowingly collect data from them.
Changes to this policy
If this policy changes materially, we will update the “Last updated” date above and, where appropriate, notify account holders by email.
Contact
Questions, data-access requests, or deletion requests: support@tubar.app