Pax is a new-tab page for your browser. It is built so that your information stays with you: almost everything it knows about you is stored in your own browser, and the services it talks to are contacted directly from your device. This policy explains what that means in practice.
The short version
- No ads, no analytics and no tracking inside the extension.
- Your tasks, notes, habits, journal and settings are stored in your browser.
- Calendars, mail counts and feeds go straight from your browser to Google, Apple, Microsoft or the publisher. They never pass through our servers.
- An account is optional. If you create one, only the things listed below are stored with us, so they can sync to your other devices.
- We never sell or share your information.
What is stored on your device
Settings, to-dos, notes, countdowns, links, habits, journal entries, focus history, saved verses and quotes, your watchlist, followed teams, news sources, uploaded photos, doodles and companions, and copies of your calendar events (so the page opens instantly and works offline). This lives in your browser’s storage. Removing the extension, or using “Erase everything” on the Privacy page inside Pax, deletes it.
Accounts and sync (optional)
If you create a Pax account, we store your email address and a copy of your settings, to-dos, notes, journal, habits, focus history, countdowns, birthdays, links, saved tabs, workspaces, your own quotes, saved verses and quotes, favorite photos, watchlist, followed teams and news sources, so they appear on your other browsers and devices. Calendar events and service passwords or keys are never uploaded: each device fetches events from your calendar provider. You can delete your account and everything stored with it from Settings › Account at any time. Sync is hosted by Supabase.
Connected calendars and services
When you connect a service, Pax talks to it directly from your browser using the access you grant, and keeps the access token on your device.
| Service | What Pax does with it |
|---|---|
| Google Calendar and Google Tasks | Reads and edits your events and tasks when you ask it to. |
| Microsoft Outlook and 365 | Reads and edits your calendar events. |
| iCloud and other CalDAV servers | Reads and edits events using the app-specific password you provide, which stays on your device. |
| Gmail | Shows your unread count and recent subjects from Gmail’s own feed, only if you turn it on. |
| Todoist and Notion | Syncs tasks using the token you provide. |
| Anthropic (Ask AI and companion chat) | Sends your question or chat message, the date and time, and your weather town to Anthropic using your own API key. Nothing is sent unless you ask, and only if you've added a key. |
| Chrome's built-in AI (companion chat) | When your browser has it, companion replies are written by a model that runs on your own device. Your messages don't leave your computer. |
Pax’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to show and edit your calendars and tasks inside Pax. It is not used for advertising, not sold, not read by people, and not used to train AI models.
Content services
To show photos, weather, prices, scores and the rest, your browser requests public content from the services below. Like any website you visit, they receive your IP address and the request. Pax sends them no account information.
| Feature | Services |
|---|---|
| Photos | Picsum and Unsplash, Bing (via Peapix), Google Earth View, Wikimedia Commons |
| Weather | Open-Meteo, for the town you pick. If you choose “use my location”, its coordinates go to Open-Meteo for the forecast and to BigDataCloud to look up the town’s name. |
| Currency in search | ExchangeRate-API (open.er-api.com) |
| Markets | CoinGecko; Twelve Data with your own key |
| Scores | ESPN |
| News | The newspapers and feeds you choose |
| Quran and hadith | alquran.cloud, Islamic Network audio, jsDelivr |
| Site icons | Your browser’s own icons, or DuckDuckGo and Google icon services |
| Music and radio | Spotify, YouTube (privacy-enhanced mode), Apple Music and SoundCloud embeds; the radio stations you play |
| Holidays | Google’s public holiday calendars |
Prayer times and faith
Prayer times, the Qibla direction and the Hijri date are calculated on your device from the town you set. Nothing about your prayers is sent anywhere.
Permissions
Pax asks for access to a website only when a feature needs it, for example a CalDAV server or a news feed you add, and lists everything it has been granted on its Privacy page, where you can revoke it.
This website
paxtab.com is hosted by Cloudflare. We may use Cloudflare Web Analytics, which counts page views without cookies and without identifying you. The site sets no cookies.
If you vote on an idea or send a suggestion, we store the vote or the suggestion, and your email if you give one, which we use only to reply about it. Your browser keeps a random id so you can take a vote back. To stop abuse we keep a salted one-way hash of your network address, never the address itself. To have a suggestion deleted, write to us at the address below.
Children
Pax is not directed at children under 13, and we do not knowingly collect information from them.
Your choices and rights
You can export or erase everything Pax stores on your device from its Privacy page, and delete your account from Settings › Account. If you live in a region with data protection laws such as the GDPR or CCPA, you can ask us for a copy of the data we hold about your account, or ask us to correct or delete it, by emailing us.
Changes
If we change this policy, we will update the date above and, for meaningful changes, tell you inside Pax before they take effect.
Contact
Questions about privacy: privacy@paxtab.com.