Privacy Policy

Last updated: 9 September 2026

The short version. Rewind My Browser is a local‑first browser extension. Everything it records stays in your browser’s own storage on your device. We run no servers that receive your data and no analytics. If you turn on sync, your data goes to your Google Drive — end‑to‑end encrypted, so neither we nor Google can read it.

1. Who we are

“Rewind My Browser”, “we”, “us” — the developer of the Rewind My Browser browser extension. Contact: nextcenturyventure@gmail.com.

2. What the extension records, and where it is stored

All of the following is written to your browser’s local IndexedDB storage on your own device. None of it is transmitted to us.

Tab snapshots

For each open tab: its URL, page title, favicon URL, pinned/active state, and position; and the structure of your windows and tab groups.
Captured on a timer and when your set of tabs changes materially.
No page contents and no screenshots are stored in a snapshot.

Browser Memory (page index)

For pages you visit over http(s): URL, title, description, Open Graph and JSON‑LD metadata, keywords, detected language, word count, a short plain‑text excerpt (600 characters by default, adjustable or zero), favicon URL, your visit count, the first and last time you visited, and how long the tab was focused.
You can exclude any site with a blocklist, or turn page capture off entirely.

Search‑query memory

When you run a search on a recognised engine (Google, Bing, DuckDuckGo, YouTube and similar), the query text, the engine name, and the URLs of results you open shortly afterward from the same tab.

Task Memory — off by default, per‑site opt‑in

Records nothing until you both enable the feature and add a specific site to an allowlist.
On an allowlisted site it records an ordered list of actions: the visible label of buttons you click; the label and type of form fields you fill (for example “Financial Year”, type “text”); the file names of files you upload or download; form submissions; and in‑page navigation.
It never records the values you type. Password and hidden fields are ignored entirely.
Task Memory data is always encrypted at rest and is never synced — it stays only on the device where it was recorded.

3. Encryption

You can turn on an encryption vault. A passphrase you choose is stretched with PBKDF2‑HMAC‑SHA‑256 and used to protect an AES‑256‑GCM key that encrypts snapshots, Browser Memory and Task Memory at rest. The passphrase is never stored and never transmitted; if you lose it, the encrypted data cannot be recovered by anyone, including us.

4. Sync — optional, and to your own storage

Sync is off unless you turn it on. Two options:

Encrypted backup file. You export a single encrypted file and import it on another machine. The file never leaves your control.
Your Google Drive. You authorise the extension with the drive.appdata scope, which grants access only to a hidden folder that belongs to this app inside your Drive — not to your files. The extension uploads only client‑side‑encrypted blobs to that folder. We never receive your Google credentials, your access token, or any readable data. You can disconnect at any time from the extension’s settings or from your Google account.

Our use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements, and to the Google API Services User Data Policy.

5. What we do not do

No analytics, telemetry, crash reporting, or usage tracking.
No advertising and no third‑party scripts or trackers.
No sale, sharing, or transfer of your data to anyone.
No server operated by us that receives the contents of your snapshots, memory or Task Memory.

6. Browser permissions and why they are needed

tabs, tabGroups, sessions, windows — read the tab/window/group structure to snapshot and restore it.
storage, unlimitedStorage — store snapshots and memory locally.
alarms — schedule periodic snapshots, the liveness heartbeat, and auto‑lock.
identity — sign you in to your Google Drive for optional sync.
downloads — note the filename of a download so Task Memory can include it in a workflow (only on allowlisted sites).
Content scripts on all sites — read page metadata for Browser Memory, and, on allowlisted sites only, capture the action sequence for Task Memory.

7. Retention and deletion

You control retention. By default snapshots are kept for 30 days (up to 400) and indexed pages for 120 days (up to 20,000); all limits are adjustable in Settings. You can delete an individual snapshot, clear a single site’s Task Memory, clear the whole Browser Memory, or remove everything, at any time. Uninstalling the extension removes all local data.

8. Children

The extension is not directed to children under 13 and we do not knowingly collect data from them.

9. Changes

If this policy changes materially we will update the date above and, where practical, note the change in the extension. Continued use after an update means you accept the revised policy.

10. Contact

Questions or requests: nextcenturyventure@gmail.com.