Privacy Policy

VisionBoard ("we", "us", "our") is a Chrome extension that turns every new tab into your personal vision board. We take your privacy seriously. This policy explains what data we collect, why, and how you can control it.

1. What we collect

Free plan — local only

By default, VisionBoard stores everything exclusively on your device. No account is required and no data leaves your browser without your consent.

• Images — stored in your browser (locally, never uploaded)
• Board layout — element positions, sizes and z-order stored locally
• Affirmations & goals — text content stored locally
• Preferences — theme, reminder schedule, ambient settings stored locally

Pro plan — cloud sync

When you upgrade to Pro and enable cloud sync, the following additional data is collected and stored on our servers:

• Account information — email address and display name (via Google OAuth)
• Images — uploaded to Cloudflare R2 object storage, associated with your account
• Board data — layout, affirmations and goals synced to our database
• Sync metadata — timestamps, device identifiers (hashed) for conflict resolution

What we never collect

• Your browsing history or visited URLs
• Keystrokes or clipboard content
• Any data from pages you visit
• Location data
• Financial information (handled entirely by Polar)

2. Chrome permissions

VisionBoard requests the following Chrome permissions and uses them strictly as described:

• newtab — to replace the new tab page with your vision board. We cannot read your existing new tab content.
• storage — to save your board configuration locally using.
• contextMenus — to add the "Add to VisionBoard" option when you right-click an image on any webpage. We only access the image URL you explicitly right-click on.
• notifications — to send you affirmation reminders at times you configure. You can disable this at any time in the extension settings.
• identity (Pro only) — to authenticate you via Google OAuth for cloud sync.

3. How we use your data

We use collected data solely to provide and improve the VisionBoard service:

• Displaying your vision board in new tabs
• Syncing your board across devices (Pro)
• Sending notification reminders you configured
• Processing your subscription and verifying Pro status
• Providing customer support when you contact us

We do not sell your data, use it for advertising, or share it with third parties except as described in section 4.

4. Third-party services

Polar (payments)

We use Polar to process subscription payments. When you purchase a Pro plan, your payment information is collected and stored by Polar — we never see or store your card details. Polar's privacy policy applies to that interaction.

Google OAuth (Pro authentication)

Pro users may sign in with Google. We only request access to your email address and display name. We do not access your Google Drive, Gmail, or any other Google service.

Cloudflare R2 (image storage — Pro)

Pro plan images are stored in Cloudflare R2 object storage. Files are encrypted at rest and only accessible via authenticated requests tied to your account.

Analytics

We do not use any analytics trackers (no Google Analytics, no Mixpanel, no Sentry). We may review aggregate, anonymised counts (e.g. number of active installs from the Chrome Web Store dashboard) but these contain no personal data.

5. Data storage & security

• Local data is protected by Chrome's built-in sandboxing — other extensions cannot access it.
• Cloud data (Pro) is stored on servers located in the European Union and the United States.
• All data in transit is encrypted via TLS 1.2+.
• Cloud images are stored with AES-256 encryption at rest.
• Access to production databases is restricted to essential personnel only.

6. Data retention

• Local data — retained until you uninstall the extension or clear your browser data.
• Cloud data (Pro) — retained while your account is active. If you cancel Pro, your cloud data is kept for 30 days then permanently deleted, unless you request earlier deletion.
• Payment records — retained by Polar as required by applicable law (typically 7 years for financial records).

7. Your rights

Depending on your country of residence, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and associated data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing of your data
• Withdraw consent — disable cloud sync or notifications at any time in settings

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's privacy

VisionBoard is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify Pro users by email. Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this Privacy Policy? Reach out:

• Email: [email protected]
• Website: visionboardtab.com