Tab Grove / Support
Tab Grove Support
Local features work without an account or routine local password. Google sign-in is optional. Paid access is not publicly available yet. Paid orders are covered by the seven-day manual full-refund policy. Alipay only, with manual renewal and no automatic charges. Public download is not available here yet.
How do I start?
Open Tab Grove from the Chrome toolbar. Local collections are saved automatically, with no routine local password. Google sign-in is optional.
Arrange directories and collections on the left and inspect current tabs on the right. Saving a tab keeps the original page open. Collections, account caches, sign-in credentials and recovery records are automatically encrypted locally. The local key is not uploaded to Tab Grove or Google.
Which interface languages and themes are available?
Choose from 20 interface languages and three color themes. Saved directory and collection names, page titles and URLs stay in their original form. Arabic uses a right-to-left layout.
How do bookmarks and backups work?
Grant bookmark permission as needed, preview and confirm copying without automatically deleting, moving or renaming original bookmarks. You may choose to sync current collections obtained from imports or restoration.
The default export is ordinary readable JSON with no password. It contains collections and display settings, without authentication credentials. Anyone holding the file can read its complete page URLs, titles and collection names; keep it private. Imports are still validated and previewed before you confirm the merge.
Why might an upgrade ask for the old password?
This is a one-time migration of old encrypted 0.12.3 data, not routine password setup. A valid legacy session allows automatic migration; if it was cleared, use the original password. Failure preserves the old data. Normal use after migration requires no local password.
Do backups still need a password?
New exports are ordinary readable JSON with no password. Anyone with the file can read its collections and settings, so keep it private. Authentication credentials are excluded. Only deliberately importing an old encrypted backup requires the password used for that old export.
What stays local, and what goes to the cloud?
Local organization, search, bookmark transfer and backups are free without sign-in. Google sign-in is optional. You preview merges; cloud writes and cloud-history restoration require an explicitly started one-time 14-day card-free trial or active Pro. Sync includes saved collections and links, not live tabs, page bodies or local recovery records, and is not end-to-end encrypted.
Pro pricing and renewal
Pro pricing is CNY 9.90 for one month or CNY 79 per year (12 months), with the same features. Renewal is manual, with no automatic charges. Alipay is the only payment method. Cloud writes and cloud-history restoration require Pro or an explicitly started, one-time 14-day card-free trial. Local features remain free after expiry; existing cloud collections stay readable and cloud history can be previewed.
How do I request a refund?
Contact nemo.wangxx@gmail.com within seven days of successful payment to request a manual full refund for that order. Arrival follows Alipay processing; an instant refund is not promised. A refund removes only that order’s paid entitlement. Local collections, backups and the original trial remain. Duplicate charges or services not provided are handled separately.
For order or refund questions, contact nemo.wangxx@gmail.com with the purchasing account and order ID. We reply within seven working days. Do not send Google passwords, verification codes, payment passwords or bank details. Refunds are handled manually; self-service, automatic or prorated refunds are not promised.
How can I ask for help or data handling?
Email the contact below with product and Chrome versions, reproduction steps and screenshots without private links. The owner responds within seven business days. Do not send passwords, codes, complete collections or payment credentials.
After the owner verifies identity, the account and online cloud data are deleted within 30 calendar days, not through instant automatic deletion in Settings. Signing out or revoking a session does not delete data. Unsettled data or legally required retention is verified separately with its basis explained, rather than unconditional instant erasure.
Deletion requests involving payments, refunds or unsettled orders require manual review. Account and online cloud-content deletion still follows the 30-calendar-day standard after identity verification. The owner will handle minimum settlement, refund and accounting records required for necessary financial matters separately from account/cloud-content deletion. Such retention does not justify keeping cloud collections or unrelated Google sign-in identity. Scope and duration follow the actual financial-archiving basis, necessary processing and unresolved disputes, with records reviewed and removed accordingly; raw business orders and all identity data are not automatically treated as accounting vouchers. Self-service or automatic financial separation is not offered, and unconditional erasure is not promised.
How is cloud data protected and recovered?
The cloud service runs on DigitalOcean in Singapore. Its database, temporary files, keys, private configuration and deletion ledger are stored in a LUKS2 encrypted volume; disaster backups and the independent ledger use AES-256-GCM. Running services need decrypted data. Application encryption does not protect a compromised device or establish physical erasure of historical files or vendor snapshots. Necessary runtime logs have no fixed retention period in days.
Disaster backups run daily and pruning hourly. Backups are retained for at most 30 calendar days from creation, pruned from age 29 days and rejected for restore at age 30 days. Deletion requests do not extend that lifetime. Recovery uses the current trusted deletion ledger to filter deleted accounts and revoke restored-copy sessions. The operator manually updates the ledger, inventories and cleans offsite copies after deletions and during regular maintenance; continuous automatic offsite replication is not configured.
After a server restart, manual unlocking is required, temporarily interrupting cloud login and sync. Local collections can still be managed and exported without a routine local password.
How do I clear local copies?
You control local collections, offline account caches, old encrypted backups, newly exported readable JSON and Chrome bookmark copies. Cloud account deletion does not remotely erase them. Delete local collections, clear extension storage, remove exports you no longer need, and manage bookmark copies in Chrome separately.
Contact and data requests
The owner manages the public mailbox directly for product questions, account-data requests and order/refund questions, responding within seven working days. Account and online cloud-content deletion follows the 30-calendar-day standard after identity verification. Payments, refunds or unsettled orders require manual financial review; the owner will handle minimum necessary financial records separately from cloud content. Do not send passwords, verification codes, payment passwords or complete private collections.