Tab Grove / Support
Tab Grove Support
This page covers client 0.12.3 and API 0.12.3. Tab Grove remains in private Chrome testing with sign-in limited to approved test accounts, no public download and payments disabled.
How do I start and unlock?
Click Tab Grove in Chrome's toolbar. Arrange directories and collections on the left and inspect current tabs on the right. Saving a tab keeps the original page open.
Set a local password on first use or upgrade, then unlock once after a browser restart, extension update or reload; normal background-worker suspension does not require repeated entry. The password and decryption key are not persisted with product data or uploaded; the runtime key is limited to the current browser session. “Lock now” in Settings hides the workspace and pauses sync without closing open pages.
How do bookmarks and backups work?
Grant bookmark permission as needed, preview and confirm copying without automatically deleting, moving or renaming original bookmarks. You may choose to sync current collections obtained from imports or restoration.
Exports are encrypted by default using the local password in effect when exported. Readable JSON requires explicit confirmation and must be protected by you. Encrypted imports verify the password and integrity before a preview and confirmed merge.
What if I forget my local password?
A backup encrypted with that same password cannot be unlocked either; its ciphertext cannot recover the password. Recovery is limited to existing cloud collections or readable JSON backups. Keep your local password safe and do not send it to support.
What stays local, and what goes to the cloud?
Local organization, search, bookmark transfer and backups are free without sign-in. Google sign-in is limited to approved test accounts. You preview merges; cloud writes and cloud-history restoration require an explicitly started one-time 14-day card-free trial or active Pro. Payments are disabled. Sync includes saved collections and links, not live tabs, page bodies or local recovery records, and is not end-to-end encrypted.
How can I ask for help or data handling?
Email the contact below with product and Chrome versions, reproduction steps and screenshots without private links. The owner responds within seven business days. Do not send passwords, codes, complete collections or payment credentials.
After the owner verifies identity, the account and online cloud data are deleted within 30 calendar days, not through instant automatic deletion in Settings. Signing out or revoking a session does not delete data. Unsettled data or legally required retention is verified separately with its basis explained, rather than unconditional instant erasure.
How is cloud data protected and recovered?
The cloud service runs on DigitalOcean in Singapore. Its database, temporary files, keys, private configuration and deletion ledger are stored in a LUKS2 encrypted volume; disaster backups and the independent ledger use AES-256-GCM. Running services need decrypted data. Application encryption does not protect a compromised device or establish physical erasure of historical files or vendor snapshots. Necessary runtime logs have no fixed retention period in days.
Disaster backups run daily and pruning hourly. Backups are retained for at most 30 calendar days from creation, pruned from age 29 days and rejected for restore at age 30 days. Deletion requests do not extend that lifetime. Recovery uses the current trusted deletion ledger to filter deleted accounts and revoke restored-copy sessions. The operator manually updates the ledger, inventories and cleans offsite copies after deletions and during regular maintenance; continuous automatic offsite replication is not configured.
After a server restart, manual unlocking is required, temporarily interrupting cloud login and sync. Already-unlocked local collections can still be managed and exported.
How do I clear local copies?
You control local collections, offline account caches, exported encrypted backups and readable JSON, and Chrome bookmark copies. Cloud account deletion does not remotely erase them. Delete local collections, clear extension storage, remove exports you no longer need, and manage bookmark copies in Chrome separately.
Contact and data requests
The owner manages the public mailbox directly for product questions, account-data requests and future refund questions, responding within seven business days. The account and online cloud data are deleted within 30 calendar days after identity verification. Payments remain disabled. Do not send passwords, verification codes, payment passwords or complete private collections.