Privacy Policy

Last updated: 10 October 2026

This policy explains which personal data is processed when you use the BaoTabs website, download the app or let the app check for updates. The website has no accounts, contact form, advertising or browser-based tracking, and it does not load fonts, scripts or images from third parties. Minimal daily traffic totals are calculated locally from server logs as described below.

1. Controller

The controller responsible for the processing described in this policy is:

2. Website hosting and server logs

Hosting provider

This website is hosted on server infrastructure supplied by 1blu GmbH, Riedemannweg 60, 13627 Berlin, Germany. 1blu may receive the technical request data described below while providing and securing that infrastructure. Further information is available in the 1blu privacy policy.

The host is used on the basis of Art. 6(1)(f) GDPR. The legitimate interest is the secure, reliable and efficient delivery of this website and its downloads.

Domain name service

The authoritative name servers for baotabs.com are operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. DNS queries may expose technical data, normally the address of the requesting DNS resolver, to netcup. This service is used on the basis of Art. 6(1)(f) GDPR and the legitimate interest in making the website reliably reachable. See the netcup privacy policy.

Server logs

When a file is requested, the web server records:

• IP address;
• date and time of the request;
• requested host, path and request method;
• response status and amount of data transferred;
• referring page, if supplied by the client; and
• user-agent string, which normally identifies the browser or application and its version.

The logs are used to deliver the requested files, diagnose faults and protect the service against misuse. Processing is based on Art. 6(1)(f) GDPR and the legitimate interests in operating a secure and reliable service. The data is not combined with other sources or used to build user profiles.

Access and error logs are rotated weekly. Four compressed rotations are retained, so log entries are normally deleted after about five weeks at the latest. They are not archived elsewhere.

Minimal aggregate statistics

Once per day, a process on the same server calculates daily totals from the existing access logs: requests for the main website pages, website download requests grouped by app version, requests for the Sparkle update feed, and the total number of response bytes. The resulting reports contain only a date, a file name where applicable, and numerical totals. They do not contain or retain IP addresses, user-agent strings, referrers, cookies, session identifiers, geographic information or visitor profiles. No data is sent to an analytics provider.

These totals help assess interest in BaoTabs, plan server capacity and understand which app versions are being requested. Processing is based on Art. 6(1)(f) GDPR and the legitimate interests in maintaining and improving the website and app distribution. The aggregate reports are not used to identify individuals. Counts represent requests rather than unique people or confirmed installations and may include retries, automated clients or interrupted transfers.

Downloads

BaoTabs installation files are served directly from this website. A download therefore creates the same server-log entry as any other file request. Successful requests for files in the website's download directory are included in the daily aggregate totals described above. They are not linked to other information about you.

3. Cookies, local storage and external content

Cookies

This website does not set cookies. It uses no browser-based analytics, advertising pixels, social-media embeds or other tracking technologies. The aggregate statistics described in section 2 are calculated on the server and do not read or store information on your device.

Theme preference

If you use the colour-theme button, the website stores one value named baotabs-theme in your browser's local storage. It contains only light or dark, is read solely by code running in your browser and is never sent to the server. You can remove it by clearing this site's browser data.

This is functional storage used only to provide the display preference you request. It does not require consent under Article 11.7a of the Dutch Telecommunications Act. To the extent that it involves processing of personal data, the legal basis is Art. 6(1)(f) GDPR and the legitimate interest in remembering your display choice.

External links

All page assets are served from this website. Your browser contacts another provider only if you choose to follow an external link, such as the link to the hosting provider's privacy policy.

4. Contact by email

If you contact the operator by email, the information you send, including your email address, message and any attachments, is processed to answer your request. The legal basis is Art. 6(1)(b) GDPR when your message concerns a contract or steps before entering into one; otherwise it is Art. 6(1)(f) GDPR and the legitimate interest in responding to enquiries. The mail server is hosted on infrastructure supplied by 1blu GmbH, which may process this information while providing the service.

Messages are deleted when the enquiry has been resolved, unless continued storage is needed to establish, exercise or defend legal claims or to meet a statutory retention obligation. Email transmission can have security gaps, so complete protection from access by third parties cannot be guaranteed.

5. The BaoTabs application

Data stored on your Mac

BaoTabs has no user account, synchronisation, analytics or crash reporting. Information about your tabs, including titles and addresses, as well as groups and notes, is stored locally in the application's support folder on your Mac. It is not transmitted to the operator.

Site icons

BaoTabs requests favicons directly from websites you already have open. The operator does not receive these requests and no favicon intermediary is used. The website supplying an icon will ordinarily receive technical connection data such as your IP address and user-agent; that website's privacy information applies to its processing.

Update checks

BaoTabs uses the open-source Sparkle framework to request https://baotabs.com/updates/appcast.xml and, when you install an update, the relevant installation file. Those requests create the server-log entries described in section 2. The user-agent identifies BaoTabs and its version so the server can return the appropriate update information.

Automatic checks remain off until you enable them. If you do not enable them, BaoTabs contacts the update server only when you choose “Check for Updates…”. You can change the automatic-check setting at any time in Settings ▸ Updates. BaoTabs does not enable Sparkle's optional system-profile submission, so update checks do not include the Mac model, processor, language or macOS version.

6. Your data-protection rights

Subject to the conditions in the GDPR, you may have the right to:

• request access to your personal data (Art. 15);
• request correction of inaccurate data (Art. 16);
• request deletion (Art. 17) or restriction of processing (Art. 18);
• receive certain data in a portable format (Art. 20); and
• object, on grounds relating to your situation, to processing based on Art. 6(1)(f) (Art. 21).

You also have the right to lodge a complaint with a data-protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement. The Dutch supervisory authority is the Autoriteit Persoonsgegevens. Exercising that right does not affect any other administrative or judicial remedy. Use the email address in section 1 for questions or requests concerning your personal data.

7. Security and changes to this policy

The website is delivered over TLS encryption. This policy will be updated if the service, its data processing or the applicable legal requirements change. The date at the top shows the current version.