New Tab ist

Privacy policy

Last updated: 28 September 2026

New Tab ist (“we”) is operated by CHARBAX, a French single-member limited company (EURL) with a share capital of €500, registered in Marseille under number 106 017 676 (RCS Marseille), whose registered office is at 71 avenue de la Corse, 13007 Marseille, France. CHARBAX is the data controller. Contact: support@newtabist-chrome-extension.com.

New Tab ist is an independent Chrome extension. It is not made, endorsed or supported by Doist, the company behind Todoist.

What the extension does

The extension replaces Chrome's New Tab page. It shows your Todoist lists (or, if you choose it in Settings, the Todoist web app), a clock, shortcuts, a focus timer and optional widgets. From other pages, it can add the page you are on to Todoist when you ask it to.

Data stored in your browser

The following stays on your device, or in your Chrome profile if Chrome sync is on. We never receive it:

Data sent to our license server

When you activate your license, and then about once a week, the extension sends our server your license code and the random device identifier. The identifier is generated by the extension and does not identify you: it only lets us limit a code to 1 browser. This data is used only to check that the license is valid.

Purchases

Payments are processed by Stripe. We receive your email address so that we can send your license code and install link, and we keep it with your code for support, refunds and subscription management. We never receive your card details. License emails are sent through Brevo.

Your Todoist account

When you connect Todoist, our server asks Todoist which account the connection belongs to and stores that account's identifier, email address and name, with the date you connected. We use them to run the free trial (one per Todoist account), to support you, and to write to you about New Tab ist (for example before your trial ends). We keep them for as long as you use New Tab ist and up to 12 months after, and delete them on request. Your tasks never reach our server.

Free trial

The free trial lasts 7 days per Todoist account. We store its start and end dates with your Todoist account, the random identifier of each browser where you use it, and whether a license was activated afterwards, so we can count how many trials turn into purchases.

When you remove the extension

Chrome then opens a short page on our site asking why you left. Its address tells us whether you were in the trial, after it or on a paid plan, how many days you had the extension, whether Todoist was connected and the version. It also carries the identifier of your connected Todoist account, so we note that this account removed the extension and link your answer to it. We keep your answer and the optional comment for up to two years.

On a phone, you can ask us to email you the link to install New Tab ist from your computer. We send that email through Brevo and keep your address, the date and how many times you asked, for 12 months, only to write to you about New Tab ist (for example a reminder to install it). We don't sell it or share it beyond the providers on this page. To have it deleted, reply to the email or write to support; it is deleted within 30 days.

Todoist

The extension displays app.todoist.com as it is. You sign in directly on todoist.com: the extension never sees your password or the content of your tasks, and never sends them anywhere. Your use of Todoist is governed by Doist's own privacy policy.

Optional Todoist connection (“Todoist progress” widget and Simple mode)

If you click Connect Todoist, you authorize New Tab ist on todoist.com through the Todoist API (the data:read_write permission). The extension then reads, directly from your browser, your tasks for the view you chose (Today, Inbox or Upcoming) to draw the Simple list, and your completion statistics (tasks completed per day, weekly total, streak and daily goal) to draw the widget. It changes your Todoist data only when you ask it to: checking off, adding or editing a task. It deletes a task only when you click Undo right after adding it.

Capture (add a page to Todoist)

When you click the New Tab ist icon, press Alt+Shift+A or choose Add to Todoist in the right-click menu, the extension shows its panel on the current page, for that page only (Chrome's activeTab permission). It reads the page title and address, and the text or image of the element you pick, only to prefill the task. The task is sent directly to Todoist; nothing is sent to our server, and the extension has no access to the pages you visit otherwise.

During the connection, our license server receives a one-time code from Todoist and exchanges it for an access token, which it passes straight to your browser without storing it. Todoist access tokens expire after one hour: to renew one, the extension sends the renewal token to our license server, which forwards it to Todoist and returns the new pair to your browser, again without storing or logging it. The tokens and the statistics are kept only in your browser's local storage (not synced) and are otherwise sent only to Todoist. Your tasks are never sent to our server. Click Disconnect in Settings to delete them, and remove New Tab ist in Todoist's Settings → Integrations to revoke the access completely.

What we don't do

The extension has no ads, no analytics and no tracking. We don't sell your data, and we share it only with the providers listed on this page (Stripe for payments, Brevo for email, Hostinger for hosting our server, Google for website analytics if you accept it; our own Umami instance, hosted with our server, for cookie-free visit counts).

Analytics on our website

Audience measurement without cookies. We count visits with Umami, an open-source tool that we host ourselves. It sets no cookie, stores no IP address and does not follow you across sites: it records the page viewed, the referring site, the country, and the type of device and browser, in aggregate. This measurement is exempt from consent under the CNIL's guidelines. Browsers that send "Do Not Track" are not counted, and you can opt out on this browser.

Google Analytics, only with your consent. Our website (not the extension) also uses Google Analytics 4, provided by Google Ireland Limited, to count visits and see which pages are useful. It is loaded only if you click Accept in the cookie banner; if you refuse, no Google script is loaded and no analytics cookie is set.

When you accept, Google Analytics sets cookies named _ga and _ga_<ID>, kept for up to 13 months, and receives information about your visit: pages viewed, referring site, approximate location, device and browser. Google may process this data in the United States under the EU-US Data Privacy Framework. The legal basis is your consent, which you can withdraw at any time with the Cookie settings link at the bottom of every page.

Feature requests and votes

On our feature requests page, your browser keeps a random voter identifier so you can vote once per request and remove your vote. Our server stores a one-way hash of that identifier and of your IP address, only to count votes fairly; it never shows them. If you suggest a feature, we store the title, the description and, if you give it, your email address, which we use only to tell you when the feature ships. Your email is never published. Ask us to delete a suggestion or your email at any time.

Where your data is stored

Our license server and its database are hosted by Hostinger in a data center in the United Kingdom. The United Kingdom benefits from an adequacy decision of the European Commission, so data can flow there from the EU with the same level of protection. Stripe and Brevo process data under their own safeguards, including standard contractual clauses where data leaves the EU or UK.

Legal basis

We process your email address and license code to perform our contract with you (delivering and supporting the product), and to meet our accounting obligations. The random device identifier is processed for our legitimate interest in preventing a single code from being shared widely.

Retention and your rights

We keep your email and license code while your license is active, then for 3 years for accounting obligations. You can ask to access, correct or delete your data at support@newtabist-chrome-extension.com. You can also lodge a complaint with your data protection authority, for example the CNIL in France or the ICO in the United Kingdom.