Privacy
ypuf is 100% local. Nothing ypuf records about your tabs or pages ever leaves your device — there are no ypuf servers, no accounts, no analytics, and nothing is ever sold or shared.
ypuf is a local index, like your browser's own history — not a data processor.
What ypuf stores (all on your device)
To let you close tabs and find them again, ypuf keeps the following in your browser's own local storage, on your computer only:
- A content index of pages you let go — the title, the address (query string stripped off), and the readable article text, extracted on-device with Mozilla Readability (which skips navigation, ads, and form fields).
- Dwell / revisit signals — how long and how often you keep a tab open, so ypuf can tell a tab you care about from a forgotten one.
- Your settings — board panels, theme, protected sites, snooze schedules.
Uninstalling ypuf deletes all of it.
What ypuf never does
- Never transmits your browsing history, page content, or tab data off your device.
- No analytics, no telemetry, no tracking. ypuf has no servers and makes no "phone home" requests.
- No accounts, no sign-in.
- Never sells, rents, or shares your data with anyone.
What ypuf deliberately excludes
- Incognito windows are not indexed at all (ypuf is disabled in incognito).
- Sensitive sites are excluded by default — a built-in blocklist covers banking, health, government, and password-manager domains; those pages are recorded as title + address only, never their text, and you can add your own.
- Form fields and input values are never captured.
Network requests
The core of ypuf — letting tabs go and recalling them — makes zero network requests. Page text is extracted locally; recall search runs locally.
Outbound requests come only from features you turn on:
- Optional board panels (e.g. an RSS feed or a crypto-price panel) fetch from the source you picked, are disclosed in the panel, and add no tracking — the same as visiting that source in a tab.
- Recall by meaning (off by default) downloads a small (~30 MB) language model once from ypuf's GitHub release, then runs entirely on your device. It is a normal file download — GitHub sees the request like any download — but no page content, search query, or browsing data is ever part of it, and nothing further is sent after it loads. Turn it off and the model and all meaning-vectors are deleted.
If you add no panels and leave Recall by meaning off, ypuf makes no network requests at all. Either way, your page content and searches never leave your device.
Data this maps to
| Type | Handled? | How |
|---|---|---|
| Web history | Yes | Stored locally only; never transmitted. |
| Website content | Yes | Readable text, extracted + stored on-device only. |
| User activity | Yes | Dwell time + revisit counts, locally only. No keystroke/click logging. |
| PII · financial · auth · health · location · communications | No | Not collected; sensitive sites excluded by default. |
ypuf does not sell or transfer user data to anyone, does not use it for purposes unrelated to recalling your tabs, and does not use it for creditworthiness or lending.
Your controls
- "What's indexed" — a view of everything ypuf has stored.
- Forget — one click to remove any page or every page from a domain.
- Protected sites — keep any site from ever being auto-closed.
- Uninstall — removes ypuf and all local data.
About this website
Everything above is about the ypuf extension, which collects no analytics of any kind. This marketing site (ypuf.com) is separate, and uses umami — a privacy-friendly, cookieless analytics tool we self-host, so the data is never handed to a third-party ad network.
It records aggregate page views only — which pages are visited, rough referrer and country. No cookies, no fingerprinting, no cross-site tracking, no personal data, and nothing sold or shared. It runs only on this website, never inside the extension.
Contact
Questions? Open an issue at github.com/momentmaker/ypuf or email privacy@ypuf.com.