Privacy Policy
Effective date: November 1, 2026
SessionPaw is a browser extension for managing tabs, windows, sessions and bookmarks. This policy explains what SessionPaw stores, what leaves your computer, and why.
Short version: SessionPaw has no server of its own. Your tabs, sessions, settings and maps stay in your browser. A few features you choose to use talk to outside services, and they are listed below. SessionPaw contains no analytics, tracking or advertising code, and we never sell your data.
What SessionPaw stores on your device
| What | Where | Leaves your computer? |
|---|---|---|
| Local sessions, including Auto Saved backups | Extension storage in your browser profile | No |
| Settings, appearance choices, custom backgrounds | Extension storage | No |
| Window names and colors, list order, Quick List choices | Extension storage | No |
| Concept Mode maps and notes | Extension storage | No |
| Drop Area files and text | Extension database | No |
| Visit stats (off by default) | Extension storage | No |
| Tab history and Play History | Temporary storage, cleared when the browser closes | No |
| Cloud sessions, Read Later, Dustbin | Your browser bookmarks | Only through your browser's own bookmark sync, if you turned it on |
| Sign-in state, plan, profile (nickname, avatar link, Gravatar email) | Synced extension storage | Only through your browser's own sync, if you turned it on |
All of this is removed when you uninstall SessionPaw, except bookmarks, which belong to your browser.
What leaves your computer, and when
SessionPaw only contacts an outside service in these cases:
| When | Service | What is sent |
|---|---|---|
| A tab's own icon can't be shown and the browser has none cached | Google favicon service | The site's domain name. Only public domains: intranet and private addresses, IP addresses and localhost are never sent |
| You click Load from Google in the popup's Favicon tool | Google favicon service | The site's domain name |
| You use Search in site | Google Search | Your search words and the site's domain |
| You set a Gravatar email | Gravatar | A hash of that email, to fetch your picture |
| You set an avatar link | The site hosting that picture | A normal image request |
| You sign in or buy a paid plan | ExtensionPay (payments processed by Stripe) | Your email address. Payment details are entered on ExtensionPay's own page; SessionPaw never sees them |
| You use an AI feature with your own API key | The AI service you chose | Tab titles and web addresses (with everything after ? or # removed), and bookmark or session names when you organize those. Intranet and sign-in pages are left out. Your API key is sent only to that same service. The browser's built-in AI sends nothing |
| You uninstall | Google Forms | The browser opens an optional feedback form |
AI features are off until you turn them on in settings.
Permissions
SessionPaw asks for browser permissions only to do its job: reading and managing tabs, windows and tab groups; bookmarks; recently closed tabs and other devices; storage; the right-click menu; screen sizes to place windows; the browser's icon cache; and the side panel. At install it can access only one website, extensionpay.com, for payments. It never asks to read the content of the pages you visit. Access to another site is requested only when you use a feature that needs it, such as downloading an icon or connecting an AI service. The optional history permission is requested only if you click "Import earlier history" in Visit stats; SessionPaw reads the last 90 days once, keeps only domain names and daily counts on your device, and gives the permission back right after.
How we use data
Data is used only to provide SessionPaw's features. We do not sell or transfer user data to third parties except as described above, do not use it for purposes unrelated to managing your tabs, windows, sessions and bookmarks, and do not use it to determine creditworthiness or for lending.
SessionPaw's use of information received from browser APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Your choices
- AI features stay off unless you turn them on, and you can turn them off again in settings.
- Leave the Gravatar email empty, or clear it, and nothing is sent to Gravatar.
- On Firefox, settings has a switch for each feature that sends data out, including the Google favicon lookup.
- Export your sessions to a file at any time from Session Manager.
- Uninstall SessionPaw to remove everything it stored, except bookmarks.
Children
SessionPaw is not directed at children under 13 and does not knowingly collect their information.
This website
This policy is about the SessionPaw extension. This website, sessionpaw.pages.dev, is hosted on Cloudflare Pages and uses Cloudflare Web Analytics to count visits. It sets no cookies and does not track you across sites. Nothing from the extension is sent to this website.
Changes
If this policy changes, we will update this page and its effective date.
Contact
Questions: sessionpaw@gmail.com