TodayBearPrivacy Policy
TodayBear is a Chrome extension that replaces the new tab page. This policy explains what data it handles and where that data goes. In short: TodayBear has no servers and no accounts. What you save stays in your browser. The developer never receives your tabs, links, bookmarks, to-dos or calendar data.
1. Data stored on your device
The following is saved with Chrome's extension storage (chrome.storage.local) in your browser profile on your computer. It is not sent to the developer or any other server.
- Spaces, collections and saved links (URL, title, your notes and tags)
- To-dos and events you add by hand when Google Calendar is not connected
- Settings: theme, which widgets are shown, news feed and calendar links you added
- Short-lived caches so new tabs open quickly: news headlines (up to 30 minutes), calendar files from iCal links (up to 15 minutes), today's Google Calendar events (up to 5 minutes)
To delete this data, remove the extension from Chrome, or delete the items inside TodayBear.
2. Permissions and why they are needed
| Permission | Used for |
|---|---|
| New tab page | Showing TodayBear when you open a new tab. |
| Tabs | Listing the tabs open in the current window so you can save them, and opening saved links. Tab contents are never read. |
| Bookmarks | Showing and editing your Chrome bookmarks in the Bookmarks view, importing folders as collections, and saving collections as bookmark folders. Only when you use those features. |
| Storage, unlimited storage | Saving your data locally, as described in section 1. |
| Context menus | The "Save page to TodayBear Inbox" and "Save all tabs as a collection" menu items. |
| Favicon | Showing site icons from Chrome's own icon cache. |
| Identity | Signing in to Google Calendar with Chrome's built-in Google sign-in, only if you choose to connect it. |
| Site access: news.google.com, calendar.google.com, outlook.office365.com, www.googleapis.com | Loading the default news feed, calendar links, and the Google Calendar API. Access to any other site is requested separately, only when you add a news feed or calendar link from that site. |
3. Google user data (Google Calendar)
Connecting Google Calendar is optional. If you connect it, TodayBear asks Google for these permissions (OAuth scopes):
calendar.calendarlist.readonly: to list your calendars so you can choose which ones to show.calendar.events: to read today's events from the calendars you chose, and to create an event in your primary calendar when you add one in TodayBear.
How the data is used
- Your browser requests data directly from Google. It is shown on your new tab page, and nowhere else.
- Event details (title, time, location, link) for today are cached in your browser for up to 5 minutes, then replaced. Nothing is stored on any server.
- TodayBear only creates an event when you add one yourself. It never edits or deletes existing events.
- Google user data is not sold, not shared with third parties, not used for advertising, not used to train AI or machine learning models, and not read by people.
TodayBear's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
Open Settings in TodayBear and choose "Disconnect Google Calendar". This revokes TodayBear's access token. You can also remove access at any time from your Google Account under Security, Third-party apps and services (myaccount.google.com/connections).
4. Content from other sites
When TodayBear loads a news feed or a calendar link, your browser connects directly to that site, which receives the request like any web visit (for example, your IP address). Those sites' own privacy policies apply. Links you open from TodayBear open as normal browser tabs.
5. No analytics or advertising
The extension contains no analytics, crash reporting, advertising or tracking code, and sets no cookies.
6. This website
This website is hosted on Vercel. Like any web host, Vercel may process basic request data such as IP addresses to deliver and protect the site. The website uses no analytics and no cookies.
7. Children
TodayBear is not directed at children under 13 and does not knowingly collect their personal information.
8. Changes
If this policy changes, the new version will be posted here with a new effective date. Significant changes to how Google user data is used will be noted in the extension before they take effect.
9. Contact
Questions or requests: jimmyjin9197@gmail.com