What Constance remembers.
Constance organizes your tabs and bookmarks. To do that, she works with page addresses, titles, and your folder names. Never what is on a page, never what you type. This page lists exactly what she keeps, for how long, and how to make her forget. Plain English, because you should not need a lawyer to read a privacy policy.
The short version
- Addresses, titles, folder names. That is the whole universe of what she works with. Page content, passwords, and anything you type stay yours.
- The features that keep history, Time Machine and remembering closed tabs, are off until you turn them on, and they ask before the first capture.
- Nothing is sold, rented, or shared for advertising. No ad networks, no third party analytics, not on this site and not in the extension.
- Every memory has an expiry date or an off switch. Usually both.
When you sort
Pressing the sort button sends the addresses, titles, and folder names of your open tabs and bookmarks to our server, where they are organized and sent back. The run and its results are saved to your account so your dashboard, sort history, and undo work.
To name the folders, titles and addresses are passed to Anthropic's Claude, an AI service that does not train on this data under its commercial terms. Each sorted bookmark also gets a small numeric fingerprint (an embedding, computed on Cloudflare's AI service) so she can file new pages into your existing folders and find things when you search.
While you browse
Tabs grouping themselves by site happens entirely on your device; nothing is sent anywhere. On Pro, when she files a tab into one of your folders, that one tab's title and address are sent to the server to ask where it belongs.
When she acts on her own (pins a daily site, files an idle article, groups a cluster of tabs) she writes the action down, including the page address, so undo always works and you can see a record of what she did.
Time Machine, only if you say yes
Off by default. With your consent, she keeps an hourly record of which pages were open: addresses and titles, nothing else. The free plan keeps each record for 24 hours, Pro keeps it for 90 days, and expired records are deleted on a rolling schedule. If you leave Pro, records you already made stay restorable for 14 more days.
The dashboard's activity view uses an even smaller record: site names and counts only, like “9 tabs on youtube.com”. Your dashboard shows up to the last 90 days of them, and they go when your account does. Full addresses never appear in this record.
Closed tabs, only if you say yes
Off by default. With your consent, when you close a tab and never go back to it, she keeps its address and title for 14 days so she can offer it back. Open the offer or tell her to forget it and it ends. Either way, the memory expires after 14 days.
On your device
Your settings, undo snapshots, focus mode state, and the working copy of your collection live in your browser's own storage. They never leave it.
Your account
You can use Constance without an account. A random identifier ties your sorts together without knowing who you are; sign in later and it links to your account. Signing in works with Google or an emailed code, and the only identity we store is your email address. Authentication runs on Supabase.
If you upgrade to Pro, Stripe handles the payment. We never see card numbers, only your subscription status and a Stripe customer reference. The emails we send (sign-in codes, receipts, the occasional product note) go through Resend, and there are no marketing lists you did not join.
A sort report is private unless you create a share link for it. Anyone with that link can see the report's folder names, titles, and addresses. Share links can be turned off.
What she never does
- Read page content. She sees that a tab is open at an address with a title. What is on the page is invisible to her.
- Watch what you type. No keystrokes, no form fields, no passwords, ever.
- Sell or share your data. No data brokers, no advertisers, no “partners”.
- Track you across the web. No third party ad or analytics trackers, in the extension or on this site.
- Delete your bookmarks. Reorganizing never destroys anything; there is always an undo, and originals are archived, not erased.
How long things are kept
Where it lives
Your data is stored with Supabase, on AWS in Oregon, United States. The site and the sorting pipeline run on Cloudflare. Folder naming calls Anthropic. Stripe processes payments, Resend delivers email, and Google handles Google sign-in. One more, for honesty's sake: the small site icons in the panel come from Google's public favicon service, so your browser asks it for an icon by site name (never the full address). That is the complete list, and each one only touches what its job requires.
Make her forget
Every memory feature has a real switch in Settings. Flip it off and capture stops immediately; what was already kept still expires on schedule. Closed tab offers have a Forget button that removes the record right away.
If you want everything gone, email [email protected] from your account email. Your account and everything tied to it is deleted within 30 days. No questions, no retention tricks.
Changes
If this policy changes in a way that matters, you will see it in the extension before it takes effect, and this page always carries its date. Constance is made in Toronto, Canada. Questions, worries, or deletion requests: [email protected].