Your browsing data stays yours.

This Privacy Policy explains how Rabbit Labs (“we”, “us”) handles information in connection with the rabbitlabs.app website, the software we distribute, including the Rabbit Ad Blocker and Rabbit Smart Tab browser extensions, and Filebender, the file converter at filebender.rabbitlabs.app (together, the “Services”).

Our extensions, Filebender and our website are governed by different practices, and this policy distinguishes between them throughout. Where a section applies to only one, it says so. Filebender is the one product that processes your files on our servers; the section about it sets out exactly how.

Our extensions do not collect, store, process, or transmit any of the following to us or to any third party:

• Browsing history, visited URLs, page content, or search queries
• IP addresses, device identifiers, or advertising identifiers
• Usage statistics, behavioural analytics, or crash telemetry
• Names, email addresses, or any other personally identifiable information

Ad blocking, tracker detection, filter matching, and Smart Tab’s tab grouping are all performed on your device. We operate no user accounts and no backend that receives your browsing activity.

Two clarifications. Rabbit Smart Tab has to read the titles and addresses of your open tabs in order to group and suspend them. That reading happens inside your browser and the result stays there. Those titles and addresses are never transmitted to us, never written to a server, and never shared with a third party.

Rabbit Ad Blocker is never given the addresses of the individual requests a page makes: those are matched by the browser itself, against a rule file that ships inside the extension. It does read the hostname of the page you are on, because the elements to hide differ from site to site and because pausing the extension has to be remembered per site. That hostname is used on your device and goes nowhere else.

To function, our extensions store a small amount of data in your browser’s local extension storage:

• Rabbit Ad Blocker: whether blocking is switched on, the hostnames of any sites you have paused it on, and counts of what it blocked, both for the current tab and in total. Its filter lists are not stored here: they are compiled into the extension package when a new version is built, and the extension never downloads them.
• Rabbit Smart Tab: your settings, the tab groups it has created, and enough session state to restore suspended tabs.

This data remains on your device, is never transmitted to us, and is removed when you uninstall the extension or clear your browser storage.

Filebender converts files on our servers, so unlike our extensions it does process data you send us. Here is all of it.

• Your files. Files you add are uploaded over an encrypted connection to storage we control on Google Cloud, converted there in isolated containers that cannot reach the internet, and the results stored alongside them so you can download them. We do not look at, analyse, share, or use your files for anything except the conversion you asked for, and they are never used to train any model.
• How long they are kept. Inputs and results are deleted one hour after a conversion finishes (the deletion runs every five minutes), or immediately when you press “Delete files now”. A file you add but do not convert is deleted one hour after it arrives. As a safeguard, our storage also deletes anything older than one day, and deleted files are not kept in any recoverable form.
• Conversion records. For each conversion we keep the file names, sizes, formats and settings, so the History page can show them to you. These records contain no file contents. They expire after 24 hours and are deleted automatically within a further day, or at once when you choose “Remove from history”.
• A session cookie (fb_sid, strictly necessary) links your conversions to your browser so that nobody else can see them. We store only a one-way hash of it. It lasts 30 days.
• Usage counts. To keep the free allowance fair, we count conversion minutes and uploaded bytes per session and per IP address. The IP address is stored only as a salted hash that changes every day, and the counts are deleted within three days.
• Google Drive, if you use it. Filebender asks only for Google’s “files you choose” permission (drive.file), so it can open only files you pick and files it creates for you. Your Google access token stays in your browser and is sent with the requests that need it. When a conversion must save to your Drive or export a Google Docs, Sheets or Slides file while you wait, the token is stored with that conversion, encrypted, and deleted when the conversion finishes; Google expires it within an hour in any case. Filebender’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Files from a link. When you give Filebender a web address, our server downloads the file from it on your behalf. The address is not stored beyond the file’s name.
• Request logs. Google Cloud records standard request logs for Filebender, including IP address, user agent, the address requested and the time. We use them only for security and to keep the service working, and they are deleted after 30 days.

Filebender has no analytics, no advertising, and no third-party scripts except Google’s own sign-in and file picker, which load only when you choose Google Drive.

Server logs. Our hosting provider records standard request logs, which may include IP address, user agent, requested URL, and timestamp. These exist for security, abuse prevention, and reliability. They are not used to build profiles and are not linked to any identity.

Analytics, only with your consent. If you accept analytics cookies in the banner on your first visit, rabbitlabs.app uses Google Analytics to measure aggregate page views and navigation patterns. Google Analytics then sets cookies and processes your IP address on Google’s infrastructure under Google’s privacy policy. If you reject them, or make no choice, the Google Analytics script is never loaded and nothing is sent to Google. Advertising features are switched off either way. This applies to the marketing website only. It is not present in our extensions or any other product.

Contact form. The form on our Contact page does not send anything to us and does not transmit what you type. When you press Send email, your browser opens your own email application with the message already written, addressed to our support inbox. Nothing leaves your device until you press send there, and what reaches us is an ordinary email from your email provider, handled like any other message you send us.

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Legitimate interests: maintaining the security, availability, and integrity of our website through server logs.
• Consent: analytics cookies. We ask before setting them, and you can withdraw consent at any time using the “Cookie settings” link at the foot of every page.
• Legitimate interests: responding to correspondence you initiate with us.
• Performance of the service you request: processing the files you give Filebender to convert, and the records needed to show you your results.
• Legitimate interests: Filebender’s usage counts and request logs, which keep a free service available and protect it from abuse.

Our extensions set no cookies. Filebender sets one strictly necessary session cookie, described in the Filebender section above. Our website sets analytics cookies only after you agree to them. We do not use advertising cookies, tracking pixels, fingerprinting, or cross-site tracking of any kind.

• Your cookie choice (strictly necessary): stored in your browser’s local storage, not a cookie, so we remember your answer and don’t ask again on every page. It stays until you clear your browser storage.
• _ga and _ga_<ID> (analytics, only with consent): set by Google Analytics to tell visits apart and count returning visitors. They last up to two years.

Changing your mind. Use “Cookie settings” at the foot of any page to accept or reject analytics cookies. If you reject them after accepting, Google Analytics stops immediately and we delete the _ga cookies from your browser. Blocking cookies in your browser, or using a content blocker (including ours), works too and does not affect the site.

We do not sell, rent, trade, or share personal information. We have no advertising partners and no relationships with data brokers.

We use a small number of service providers strictly to operate the Services: Google Cloud, which hosts this website and runs Filebender, including storing and converting the files you give it; and Google Analytics as described above. We may disclose information where we are legally required to do so by a valid legal process, and only to the extent required.

Server logs are retained only as long as needed for security and operational purposes. Analytics data is retained according to the retention period configured in Google Analytics. Email you send us, and the correspondence that follows, is kept in our support inbox only as long as needed to resolve your enquiry, and we will delete it sooner on request. Data stored locally by our extensions is retained until you remove it. Filebender’s retention periods are set out in its own section above: one hour for files, about a day for conversion records, three days for usage counts, and 30 days for request logs.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, and the right to data portability. Residents of California may request disclosure of the categories of personal information collected and may opt out of its sale. We do not sell personal information, so there is nothing to opt out of.

Because our extensions hold no personal data about you, most requests will concern the website or Filebender. Filebender lets you delete your files and your history yourself, at any time, from the page. To make a request, contact support@rabbitlabs.app. We will respond within the time period required by applicable law, and within one month where the UK GDPR applies.

You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom this is the Information Commissioner’s Office (ICO). If you are elsewhere, you may complain to your local data protection authority.

Our hosting, email delivery, and analytics providers may process the limited website data described above on servers located outside your country, including in the United States. Filebender stores and converts files in a single Google Cloud region, and Google may process its request logs elsewhere. Where required, such transfers rely on the safeguards offered by those providers, such as the European Commission’s Standard Contractual Clauses.

The Services are not directed at children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal information from them. Because our products collect no personal information from anyone, no such data is held. If you believe a child has provided us with personal information through correspondence, contact support@rabbitlabs.app and we will delete it.

The strongest protection we can offer is not holding your data in the first place, which is the design principle behind every product we ship. For the limited website data described above, we rely on encrypted connections (HTTPS) and the security controls of our hosting provider. Filebender’s files are private to our storage (never publicly readable), each conversion runs in an isolated container with no internet access, and download links are signed and expire. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this policy to reflect changes to the Services or to legal requirements. The effective date at the top of this page will always show when it last changed. Material changes will be announced on this website before they take effect.

Questions, requests, or concerns about this policy can be sent to support@rabbitlabs.app. Our extensions ship with their source readable, with nothing minified or obfuscated, so the behaviour described in this policy can be checked directly in the package your browser installs.