Tabloaf shows a small pixel cat at the bottom of the web pages you open. It has no server, no account, no analytics and no ads, and it makes no network requests.
What it reads on a page. The address of the site (its host name, like en.wikipedia.org), to know whether you hid the cat there and whether the site is on the social-media list for the "lies on the feed" reminder. That something happened: a key was pressed, the mouse moved, the page was scrolled. Only the time of it is kept, in the page's memory, to make the cat tap along and to count active minutes; for the mouse also where the pointer is, so the cat can run after it and notice petting. None of this is saved or sent. Which key was pressed, what you type, form fields, passwords and cookies are never read. For perches and yarn collisions it inspects element geometry and styles; up to 120 characters of a heading are measured locally to place the paws on its letters. It reads the page path, feed layout and visible video playback state to place reminders away from video. These details and the yarn trajectory stay in page memory and are not stored or transmitted.
What is sent outside your browser. Nothing.
What is stored, only on this device (chrome.storage.local, one record): the cat's name, coat, personality and appearance choices (base color, coat pattern, white markings, fur length, socks, nose patch, tail tip and eye color), chosen size, and up to five named looks (coat, appearance, hat, neckwear and eyewear); your settings (interface language or automatic selection, shown or hidden, hidden-until time, the sites where you hid it, quiet mode, whether clicks pass through the cat, the feed reminder and its limit in minutes, the list of social sites); the hats, neckwear and eyewear you have collected and the ones it wears; counters — minutes of activity toward the next gift and toward the play break, minutes on social sites today (with the date), how many times you petted it, the waiting gift’s deadline, the day you adopted it and the time of the last activity report (to notice a 5-minute pause); and where along the bottom of the window it sits. No addresses of pages you visit are stored, except host names you choose to hide the cat on.
Permissions. One: storage, for the record above. The page script runs on http and https pages so the cat can appear there; browser pages (new tab, settings, the Chrome Web Store) are closed to extensions. For "Hide on this site" the toolbar window asks the extension's own page script in the current tab for the site's host name; it has no access to your tabs or history.
Exports. When you choose Save card or Save animation, the extension creates a PNG or GIF on this device and saves it through your browser. It includes the cat’s name, appearance, hat, neckwear, eyewear and personality label. It never captures a website or uploads the image.
Backup. When you choose Save backup, the extension writes a small JSON file with the cat (name, coat, personality, appearance, size, saved looks, collection, worn items, pet count, birth date, a few settings and the hidden-site list) through your browser's downloads. Restore from file reads a file you pick, checks every value and applies it; nothing is uploaded. Gift timers, activity minutes and visited sites are not in the file.
Removing data. Removing the extension deletes its local settings and saved looks. Exported PNG/GIF and backup files remain in your downloads until you delete them.
What is never collected: personal data, browsing history, keystrokes or typed text, analytics, advertising identifiers. Nothing is sold or shared with the author or anyone else.