Effective October 12, 2026 · Applies to the TabLock extension for Chrome and other chromium based browsers, version 1.0 and later
<aside> 💡
TabLock is a browser extension that puts a password lock screen in front of web pages and sites you choose. It is made by the creators of pagepass.co. In this policy, "we" means the TabLock developer and "you" means the person using the extension.
TabLock keeps the information it needs to work in Chrome's extension storage on your computer. This storage is private to TabLock and is not synced to your Google account or to other devices. We never receive a copy of it.
| Data | What it is for |
|---|---|
| Protected sites | The web addresses you add, with each one's settings: exact or partial match, Simple or Secure lock, permanent or one-time, on or off, and the date it was added. If you set a password for one site, that password is stored with it. |
| Master password | Stored only as a salted, one-way hash (PBKDF2-SHA256). The password itself is never stored and cannot be read back from the hash. |
| Security questions | The two questions you choose and your answers, used to recover access if you forget your password. |
| Settings | Your auto-lock timeout, whether pages are locked in Incognito windows, and whether you have finished first-time setup. |
| Data | What it is for | How long |
|---|---|---|
| Lock page destinations | When a Secure lock stops a page from loading, TabLock remembers which address that tab was going to, under a random ID, so the tab can still be unlocked after Chrome restarts. This is only saved for sites already on your protected list, and never for Incognito tabs. | Up to 30 days, at most 100 entries |
| Unlock tokens | A short-lived marker that lets a page reload once after you enter the correct password. | 30 seconds |
| Tab lock status | Which open tabs are currently locked or unlocked, so pages stay unlocked while you use them and the popup shows the right state. | Until Chrome closes |
| Settings session | Keeps the Sites and Settings screens open after you enter your password. | 5 minutes, or until Chrome closes |
To lock a page before you see it, TabLock runs on every website and checks each page's address against your protected list. That check happens inside your browser.
TabLock does not save the addresses of pages that aren't on your list, does not keep a browsing history, and does not read, collect or send the text, images, forms or other content of any page.
For Secure locks, TabLock asks Chrome to send the visit to its own lock screen before the protected page loads. These redirect rules are built only from your protected list and are cleared when Chrome closes.
TabLock makes no network requests of its own and loads no code from the internet. Its fonts and icons are bundled with the extension.
It contains a few links that open ordinary web pages in a new tab. TabLock passes no information about you or your browsing to these pages. Once one is open, it is run by its provider under that provider's privacy policy: