Tempo

Browser Extension Privacy

Last updated 29 August 2026

The Tempo browser extension saves pages to your Tempo inbox and lets you triage that inbox from your browser. It is covered by the same principle as the app: your data is yours, held in your own iCloud account, and the developer cannot read it.

The short version

• There is no Tempo account and no Tempo server. The extension talks only to Apple.
• What you save goes into the same private iCloud database the app already syncs with, tied to your Apple Account.
• The developer has no access to it and cannot view, export or recover it.
• The extension does not track your browsing. It reads a page only when you ask it to save that page.

What it reads, and when

Only when you click Save, or choose "Save to Tempo" from the right-click menu. There is no background monitoring of what you browse, and no content script running on the pages you visit.

At that moment it reads the page's address and title so the saved item has something to show, and — if the page is a PDF or an image — the file itself, so the attachment is stored rather than a link that may not resolve later. If you save a selection, it reads the text you selected.

Where it goes

To Apple's CloudKit, into the private database belonging to your Apple Account. Two Apple hosts are involved: api.apple-cloudkit.com for the inbox records, and icloud-content.com for attachments. Nothing is sent anywhere else, and nothing passes through a server operated by the developer, because there is no such server in the path.

Signing in

Connecting the extension opens Apple's own sign-in page. You enter your Apple Account details there, on Apple's site — the extension never sees your password. Apple returns a session token scoped to Tempo's iCloud container, which is stored locally in your browser and never transmitted anywhere except back to Apple. It expires and has to be renewed periodically. Signing out deletes it.

What it stores in your browser

Stored	Why	Leaves your browser?
Apple session token	To read and write your inbox without asking you to sign in repeatedly.	Only back to Apple, to authenticate your own requests.
A copy of your inbox	So the popup opens instantly instead of blank while it loads.	No.
Items saved but not yet picked up	So something you just saved appears immediately, before the app has collected it.	No.

Permissions

Permission	Why
Storage	To hold the session token and inbox cache described above.
Tabs	To read the address and title of the page you are saving, and to notice when Apple's sign-in returns.
Active tab	To read the bytes of the page you are saving, so a PDF or image is stored as a file. Limited to the tab that is open when you click Save.
Context menus	To add "Save to Tempo" to the right-click menu.
Favicon	To draw each link's site icon from Chrome's own cache. This is deliberate: fetching icons from a third-party favicon service would tell that service every site in your inbox.
Access to api.apple-cloudkit.com and icloud-content.com	Apple's CloudKit API and its attachment store. These are the only hosts the extension may contact.

What it does not do

• No analytics, advertising, or third-party tracking of any kind.
• No selling or sharing of data. There is no recipient to share it with.
• No access to sites you are not actively saving. It cannot read pages in the background.
• No remotely hosted code. Everything it runs ships in the extension package and is reviewable by Apple's and Google's review processes alike.

Deleting your data

Removing an item in the extension or the app removes it from iCloud. Signing out clears the session and the local cache. Uninstalling the extension removes everything it stored in your browser; what is already in your inbox stays in the app, and in your iCloud account, where you control it.

Contact

Questions about this policy, or about what the extension does, can go to the address on the Support page.