Privacy is a product decision,
not a slogan.
This policy explains how the Tabu Analytics website, browser products, launch waitlists and support services handle information.
1. Scope and controller
Tabu Analytics is the trading name used by the independent developer who operates this website and publishes its software products. This policy applies to the Tabu Analytics website, browser extensions, product launch waitlists, support requests and same-origin service APIs.
Privacy requests can be sent to support@tabu-analytics.com. The operator's confirmed legal identity and geographic business address will be added to the public legal notice before any paid sale opens.
2. Information processed locally
Tabu Analytics products are designed to process information locally where practical. A browser extension reads page or account content only after an explicit user action, such as starting a check from the extension, and only through the permissions disclosed for that product. Tabu Analytics extensions are not built to monitor browsing in the background or to operate as browsing-history collectors.
The content an extension reads, the results it produces, its settings and any locally saved history stay in the browser unless a clearly labelled optional feature says otherwise.
Browser products may use extension storage such as chrome.storage.local for settings and locally saved workflow data. Each product's page on this website and its Chrome Web Store disclosures describe the exact permissions it requests, what it reads, what stays local and any optional feature that transmits information. Form Ready's details are on its own privacy page.
3. Product launch waitlists
If you choose to join a launch waitlist, the website stores your email address, signup source, consent-policy version, and signup and update timestamps in Cloudflare D1. It does not ask for your name, postal address, payment details, browsing history or extension findings.
A waitlist is used only to send the product launch message described beside its form. It is not a newsletter, preorder, reservation or purchase. You can withdraw at any time by emailing support@tabu-analytics.com from the joined address and naming the product.
4. Information sent to remote services
Website and infrastructure
Cloudflare delivers and protects the website and stores waitlist and dormant paid-service records in D1. The website uses no advertising cookies or tracking pixels.
Website analytics, only with your consent
If you choose Accept in the cookie banner, the website loads Google Analytics 4, a service of Google Ireland Limited, to count pages viewed, how visitors arrived, general location, device and browser type, and interactions with the page. It uses cookies holding a random identifier, listed in the cookie notice. Google Analytics uses your IP address to estimate a general location and does not store it. Google signals and ad personalization are switched off. Tabu Analytics uses the reports only to see which pages are useful and does not combine them with waitlist, support or license records.
If you choose Reject, or make no choice, Google Analytics does not load. You can change your choice at any time with Cookie settings at the foot of every page. Browser extensions contain no Google Analytics.
Paid licensing and checkout
Paid licenses, when a product page offers one, are sold through Paddle, our merchant of record. Checkout runs on Paddle’s payment form: Paddle collects the payment details, billing country and email it needs to sell the license, calculate tax and issue the receipt, under Paddle’s own privacy policy. Tabu Analytics receives the order reference, the buyer email and the license record, and never receives card numbers. This policy will be updated before real payments are enabled.
Optional performance services
A product may offer an optional Google mobile performance test. It runs only when the user explicitly requests it and sends the public page URL to the Tabu Analytics service and Google PageSpeed Insights. It does not send the page document, findings, custom phrases or unrelated browsing history. A normalized result may be cached for 24 hours under a one-way URL hash; the raw URL is not stored in that cache.
5. Purposes and legal bases
- Consent: store a launch-waitlist record and send the specific message requested. Consent can be withdrawn at any time.
- Consent: measure website visits with Google Analytics, only after you choose Accept. You can withdraw it at any time with Cookie settings.
- Contract: provide requested support and, only if paid sales later open, fulfill and validate a product license.
- Legitimate interests: secure the website, prevent automated form abuse and investigate service failures without retaining IP addresses in waitlist records.
- Legal obligation: respond to lawful requests and retain transaction information only after real sales begin where law requires it.
6. Recipients and international processing
Cloudflare processes website delivery, security and D1 storage. Paddle and Google do not receive waitlist records. They process information only if a separately disclosed payment or optional performance flow is opened and the user chooses to use it, or, for Google, if you accept website analytics.
Providers may process information in more than one country. Google Analytics data may be processed by Google LLC in the United States, which is certified under the EU-US Data Privacy Framework. Where transfer rules apply, Tabu Analytics will use the provider's applicable contractual safeguards or another lawful transfer mechanism. Locally processed page content and findings are not included.
7. Retention and security
A waitlist record is deleted when consent is withdrawn. If the relevant product does not launch, the record is deleted no later than 12 months after signup. If it launches, non-customer waitlist records are deleted within 90 days after the requested launch message is sent.
Google Analytics keeps event-level data for 2 months, then deletes it; aggregated reports keep only counts. Your cookie choice stays in your browser for 12 months.
Security measures include HTTPS, restricted database access, prepared database statements, same-origin submissions, encrypted license values and automated-form safeguards. No system can be guaranteed perfectly secure.
8. Your choices and rights
Depending on your location, you may request access, correction, deletion, restriction, objection or portability of personal information. You may withdraw waitlist consent at any time, and analytics consent with Cookie settings at the foot of any page. For a waitlist, contact support from the joined email and name the relevant product so the record can be located safely.
You may complain to the data-protection authority in the country where you live or work if you believe applicable data-protection law has been breached.
9. Browser product privacy commitments
Tabu Analytics browser extensions use data only to provide or improve their disclosed purpose. User data is not sold, used for advertising, transferred for credit or lending decisions, or used for unrelated profiling. Remote transfers use encrypted connections, and each product requests only the permissions needed for its current features.
10. Children
Tabu Analytics products are built as professional productivity tools and are not directed to children. Tabu Analytics does not knowingly collect children's personal information through the service.
11. Changes
Material changes will be published here with a revised date. Changes do not remove mandatory privacy rights that applied when information was collected.