Privacy Policy

Keep Browser

We have added explanations of sharing from ChatGPT, shared-data retention and deletion, audit records, and server access logs. We have also clarified the differences between sharing from the app and sharing from ChatGPT. See our Privacy Policy for details.

1. Provider collecting information

RSA Technologies, LLC ("the Company").

2. Information collected and purpose

The Company and the third-party services integrated in the app (analytics and advertising) may collect the following to improve performance, optimize the user experience, and provide personalized ads.

(1) Information collected

Device information and identifiers (via analytics and advertising SDKs)
Approximate location (estimated by the advertising SDK from IP address). Precise location is used only when a website requests it, via the OS permission, and is not collected continuously by the Company.
App interaction and usage information (via analytics tools)
App crash and diagnostic information
Advertising-related information (via the advertising SDK)

For the analytics described in this section, we do not send the text of your search queries - only the length (character count). URLs are limited to the domain when needed; full URLs and full page titles are not sent. Private tab contents are not sent. For information sent when you choose to share content, see Section 3.

(2) Purposes

App improvement
Performance analysis
User-behavior analysis
Personalized advertising
Bug fixing

(3) Key services used

Google Firebase Analytics (usage analytics)
Google Firebase Crashlytics (crash diagnostics)
Google AdMob (advertising)
Google User Messaging Platform (ad consent management)

(4) Data retention

Analytics and related data are retained for up to 2 years from collection, then deleted or anonymized (may be adjusted per local law).
Tab-group share-link data is retained for 30 days from creation or the last import, refreshed on each import.

For sharing-related audit records and the handling of data after deletion, see Section 3.

3. Tab group sharing (KeepShare)

(1) Tab group sharing from the app

When you create a share link for a tab group, the following is sent to and stored on the Company's share server (api.keepbrowser.com) to generate and deliver the link:

Tab URLs, label names and colors, the parent-child tab hierarchy, a share name (display name), and the tab count.

The following are not shared or sent: page title text, favicons, screenshots, cookies, login state, form input, your full browsing history, and private tabs.

Sharing is initiated by you, and anyone with the link can import the tab group. Share-link data is retained for 30 days from creation or the last import (refreshed on import), and you can delete a server-side share from the in-app share-history screen. Sharing is not data "sync."

(2) Sharing from ChatGPT

When you ask ChatGPT to share with Keep Browser, our integration server (mcp.keepbrowser.com) receives the public URLs, display names of pages or places, group names and colors, hierarchy, and order that ChatGPT passes to the sharing tool. If the input includes an overview, descriptions for individual pages, or a summary language, we also receive that information and use it to create the summary page.

The shared URLs and tab tree are stored on our sharing server (api.keepbrowser.com). The summary is stored on mcp.keepbrowser.com and added as the first tab of the shared group. The tool requests the content selected for sharing; it does not provide an input field for storing the entire conversation. However, selected names and descriptions are also published, so do not include personal information, confidential information, or private links.

Anyone with the share link or summary URL can view the shared content and included descriptions. Access is not restricted to the ChatGPT conversation. Display names are used on the summary and do not overwrite the titles of imported website tabs.

Share links remain available for 30 days from creation or the most recent import. Importing the group into Keep Browser renews that period. Viewing the share page or summary alone does not extend it. If the share is deleted or expires, the summary also becomes unavailable. Previously imported website tabs remain on the device, but the summary tab can no longer open that page.

There is currently no self-service deletion feature for shares created through ChatGPT. To request deletion, send the share link and the reason for your request to keepbrowser-support@rsa-tec.com. We will delete the share after reviewing the target and the request. We may ask for additional information needed to verify the request. Deleting a ChatGPT conversation or tabs on your device does not delete the server-side share link.

(3) Sharing and access audit records (app and ChatGPT sharing)

To prevent abuse and investigate service issues, we record separately hashed values of the connecting IP address and user agent, the time, action type and result, and request or share identifiers for operations such as share creation, import, metadata retrieval, and deletion. This includes imports by recipients of a share link. The retention period for these audit records is 90 days; records older than 90 days are deleted by scheduled processing. Audit records follow this retention period even if the shared content is deleted.

Separately, to prevent abuse and investigate service issues, server access logs record unhashed IP addresses and other information. The retention period is 12 months; older logs are deleted by the hosting provider's scheduled processing. These logs are separate from the audit records retained for 90 days described above.

(4) Data after deletion

When a share is deleted or expires, access is stopped and its shared content and summary body are deleted from operational storage. Scheduled processing or recovery from failures may cause content deletion to occur later than access termination. Management information, such as the share name, identifiers, and deletion status, and audit records are retained and cleaned up separately from the public content. This process does not delete website tabs already imported onto a device.

4. Consent and settings

Consent for personalized advertising is obtained at first launch via UMP (EEA/UK/Switzerland, etc.) and iOS App Tracking Transparency.
Location is confirmed individually via the OS permission dialog when a feature or website requests it.
Analytics (Firebase Analytics) and crash diagnostics (Crashlytics) are used to operate and improve the app. You can manage ad privacy options, analytics, and crash reports from the app's privacy settings.
In the EEA, UK, and Switzerland, analytics and crash reports remain off until you explicitly turn them on. Outside those regions, they are on by default but can be turned off in Settings. While the app has not yet resolved the region or consent state, optional collection and ad initialization remain off.

5. User rights and control

We respect your rights for data we directly control. Data collected via Firebase and advertising SDKs is partly outside our control, so there are limits to what we can manage; we will do what is practically feasible.

Right to access your data
Right to correct or delete your data
Right to withdraw consent
Right to data portability
In "Settings > Delete data" you can delete browsing history, cookies, cache, etc. For shares created from the app, you can delete the server-side share through the app's share-history screen. For shares created through ChatGPT, see Section 3.

6. Data protection

We strive to protect user information. Data is encrypted in transit using TLS. Sharing with third parties occurs only when necessary, with prior notice and required consent.

7. Contact

For questions or data-access requests regarding this policy, contact keepbrowser-support@rsa-tec.com.

8. Revisions / effective dates

We update this policy in response to legal or policy changes, with notice and renewed consent where required.

Effective April 1, 2023
Revised November 13, 2023
Revised June 29, 2026
Revised September 15, 2026