Tonble — Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how Tonble ("we", "us") handles your information across the Tonble website (tonble.com) and the Tonble browser extension ("Tonble Overlay"). Tonble suggests websites for you to explore and learns your interests from your feedback.

1. Information we collect

• Account information. When you create an account or sign in, we store your email address and a securely hashed password. If you sign in with Google, we receive basic Google profile information (your email, and name/picture if provided). Optional two-factor authentication is supported.
• Guest mode. You can use Tonble without an account. In that case we assign an anonymous guest identifier so we can remember your ratings; if you later sign up, that guest activity is migrated to your new account.
• Activity & preferences. To recommend pages and learn what you like: when Tonble shows you a page we record which catalogue page was served and when; when you click 👍 or 👎 we record the rating, and the extension sends us that page's address (URL), title and description so we can add it to our catalogue; from your ratings we derive and store preference scores per topic category.
• Local device storage. The extension keeps your sign-in token, your show/hide-bar preference, and a local cache of your own 👍/👎 ratings (so pages you rated light up again on revisit) in your browser's extension storage. This stays on your device.

2. What the extension does NOT do

The bar appears on the pages you browse so it is always available, but the extension only sends data to us when you actively use it (request the next page, or rate a page). It does not silently log every page you visit, and it does not read page content beyond the title and description of a page you choose to rate.

3. How we use information

To authenticate you, serve pages and personalize suggestions from your ratings, to build and improve the shared catalogue, and to keep the service secure. We do not sell your data, do not use it for advertising, and do not use it to determine creditworthiness or for lending.

4. How we share information

Only with: service providers that host and run Tonble (to operate the service); Google, if you choose Google sign-in (handled by Google under its own policy); and as required by applicable law.

5. Data retention & deletion

We keep your account and activity data while your account is active. You can request account deletion; when an account is deleted, its associated activity and preference data are removed.

6. Security

Passwords are stored only as salted hashes (never in plain text). Sign-in tokens are transmitted over HTTPS and stored locally in your browser. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

7. Cookies & local storage

The website uses necessary cookies to keep you signed in. The extension stores its sign-in token in local extension storage (not cookies).

8. Browser permissions (extension)

• storage — keep your sign-in token and bar preference on your device;
• activeTab + scripting — show or hide the Tonble bar on the current page;
• identity — run the sign-in flow;
• access to tonble.com — talk to the Tonble backend.

The bar is injected on the pages you browse so it is always available; data is sent to us only when you act.

9. Children

Tonble is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy; we will change the "Last updated" date above and, for material changes, provide notice in the app.

11. Contact

For questions or data requests, contact privacy@tonble.com.

Chrome Web Store — data use

For the Chrome Web Store listing, the Tonble Overlay extension:

• Collects: authentication information (your sign-in token); and website content/activity limited to pages you rate (their URL, title and description) and the pages served to you.
• Does not collect: location, health, financial or payment information, personal communications, or your full web-browsing history.
• We do not sell your data, do not use or transfer it for purposes unrelated to the extension's single purpose, and do not use or transfer it to determine creditworthiness or for lending.