Skip to content
Tabitha

Privacy policy

Last updated 8 September 2026

The short version

Extracted data stays in your browser until you sign in and sync a table on purpose. We do not read the pages you visit, we do not sell anything to anyone, and there is no third party tracking script in the extension.

The controller of personal data on this site and in the product is Creathink One Sp. z o.o., Warsaw, Poland. Write to hello@creathink.one with any question or request below.

What the extension stores locally

Tables, recipes, settings and your entitlement token live in your browser through IndexedDB and extension storage. They are readable only by the extension and are removed when you uninstall it or clear the data from the settings screen.

What reaches our server

Only what you send. That means: your email address and password hash if you create an account, tables and recipes you sync, jobs you start from MCP or the cloud, and run logs for those jobs. Run logs contain the addresses of the pages visited during that run, because without them a failed run cannot be explained.

  • We do not upload local tables in the background.
  • We do not receive your browsing history.
  • We do not store the content of pages you scrape beyond the columns you asked for.

Website analytics

This website uses Google Analytics 4 with consent mode. Nothing is loaded and no identifier is set until you accept analytics in the banner. Declining leaves the site fully usable. The extension contains no analytics at all, and anonymous product statistics, when they arrive, will be off by default and described in the changelog.

Cookies

The site sets one cookie to remember your answer to the consent banner. The application sets a session cookie after you sign in. There are no advertising cookies and no cross site identifiers.

Where the data lives

Our server is in Germany, in a datacenter run by Hetzner. The database and the application sit on the same machine, and the cloud worker will run there too. Nothing is replicated outside the European Economic Area, other than the Google Analytics data described above, and only after you consent.

How long we keep it

Account data for as long as the account exists. Synced tables until you delete them or delete the account. Run logs for ninety days. Waitlist entries until we write to you about pricing or you ask us to remove them.

Your rights

Under GDPR you can ask for a copy of your data, its correction, its deletion, a restriction on processing, or you can object to processing. Write to hello@creathink.one and we will answer within a month. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office.

Data you collect with Tabitha

When your table describes people, you are the controller of that data, not us. Your obligations under GDPR are yours: a lawful basis, an information notice, retention limits and the ability to honour requests. We process it only as far as syncing and exporting it requires, and only on your instruction. The terms of use say the same thing in more detail.

Changes

If this policy changes in a way that affects you, the changelog carries the entry and the date at the top of this page moves.