Last updated: October 3, 2026
Workspace Zero is a new-tab dashboard extension. This policy explains what data it accesses and how it is used.
All of your dashboard data (shortcuts, notes, calendar events, saved sessions, settings, and any GitHub personal access token) is stored locally in your browser using IndexedDB. Workspace Zero does not store dashboard data or Google tokens on any server, does not sell data, and does not share data for advertising or analytics. When Google features are connected from Brave, a stateless OAuth broker on this domain exchanges or refreshes Google tokens and immediately returns them to the extension without retaining them. Workspace Zero's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
Shortcuts, notes, clocks, calendars, workspaces, appearance settings, and saved browser sessions are stored in your browser's local IndexedDB storage. This data never leaves your device unless you explicitly use one of the connected-service features described below.
If you connect Google Calendar in Settings, the extension requests access to read, create, update, and delete calendar events for two-way synchronization. Chrome uses its native Identity API. In Brave, authorization codes and tokens pass through Workspace Zero's stateless OAuth broker on this domain solely for exchange, refresh, or revocation; the broker does not log, persist, or otherwise use them. Calendar contents are sent directly between the extension and Google.
If you connect Google Drive backup in Settings, the extension can write a single backup file to your Google Drive application data folder — a private storage area that only this extension can read or write. Backup contents are sent directly from the extension to Google Drive and never pass through the OAuth broker. Saved browser sessions are excluded from this backup by default.
If you add a GitHub personal access token in Settings, it is stored locally in your browser and used only to call GitHub's API directly from your browser to show your assigned issues, pull requests, review requests, and workflow runs for repositories you select. Your token and this data are never sent to any server we operate.
If you add a weather widget, the ZIP code you enter is sent to a third-party weather data provider (WeatherAPI.com) to retrieve current conditions. No account or personal identity is attached to this request beyond the ZIP code itself.
If you enable the Tab Manager widget, it requests optional tabs, sessions, and tabGroups permissions so it can show your open tabs, let you save/restore browser sessions, and show recently closed tabs — all within your browser, entirely locally. This data is never transmitted anywhere. You can revoke this access at any time from chrome://extensions.
The Bookmarks widget reads and edits bookmarks only through the browser's bookmarks API and never copies them into a backup. RSS widgets fetch only feed URLs entered by the user after requesting that specific site's permission; articles are cached locally for offline reading.
Workout templates, schedules, history, logged sets, notes, preferences, and rest timers are stored locally. They leave the device only when the user explicitly exports a backup or uses optional Google Drive backup.
The Buy me a coffee link opens a separate Stripe-hosted page. Workspace Zero never receives, transmits, or stores payment or billing information.
If this policy changes, the "Last updated" date above will be revised.
Questions about this policy can be directed to [email protected].