Is Toby safe?

Toby safety at a glance

Who makes Toby?

The Chrome Web Store lists Launch Labs INC, of Vancouver, British Columbia, Canada, as Toby's publisher. Toby's privacy policy names the same company, "Launch Labs, Inc. dba Axiom Zen", with an address on Howe Street in Vancouver. Check that the store listing's "Offered by" line shows Launch Labs INC before you install.

Do I need an account to use Toby?

Yes. Toby's help center says "Toby can no longer support guest mode" and that "all users must now create an account to continue using Toby and to safeguard their data." Older pages still say you can use Toby locally without an account. The help-center article is the newer statement, so plan on signing up.

Where does Toby store my data?

On Toby's servers, once you have an account. Its privacy policy says Toby "stores the tabs and lists you add as part of the service, but not the sites you visit". The policy also mentions Heroku data centers. The old guest mode kept data "locally on your device", but that option is gone.

What data does Toby collect?

With an account, Toby collects "your name, email address, IP address, location and device information", per its privacy policy. It also stores the tabs and lists you save. The policy says Toby never reads the pages you visit and never sells your data. You can ask for your account and data to be deleted.

From Toby's privacy policy, gettoby.com/privacy:

"Toby never reads the pages you visit; it only sees the titles, addresses and icons of the tabs you choose to save."

"We never sell your data and are committed to protecting your privacy."

Toby keeps your data as long as you use the service or keep an account. If you ask for a copy, the policy says it arrives "within 14 days, but in all events within 30 days". Requests go to hello@gettoby.com.

What does the Chrome Web Store say about Toby's data?

Toby's store listing says it handles four kinds of data: personally identifiable information, authentication information, location and web history. The developer certifies that this data is not sold to third parties, outside approved uses, and not used for anything unrelated to Toby's core job. That fits an extension with accounts and saved tabs.

The listing's privacy section, in full:

• Declared: Personally identifiable information, Authentication information, Location, Web history
• Certified: "not being sold to third parties, outside of the approved use cases"
• Certified: "not being used or transferred for purposes that are unrelated to the item's core functionality"

The listing also says Toby "follows recommended practices for Chrome extensions".

Does Toby use AI on my tabs?

Only if you choose to. Toby's help center says "Using AI features in Toby is optional." Its AI Naming and AI Sort Tabs features work on your tab titles and how your tabs are arranged. If you don't want your tab titles used this way, don't turn those features on. The rest of Toby works without them.

Is Toby open source?

No, not as far as we could find. We found no public source code for Toby, so nobody outside the company can read what it does. That doesn't make it unsafe. It means you rely on Toby's privacy policy, the store's data labels and the install prompt, rather than on code anyone can check.

Is Toby a Manifest V3 extension?

Yes, according to Toby. Its help center says the new account rule was needed "to ensure data security and compliance with MV3 standards", and it mentions Chrome's deadline for Manifest V3. Manifest V3 is Chrome's current extension platform. We couldn't see Toby's manifest file itself, so this rests on the developer's statement.

What is the latest version of Toby?

The Chrome Web Store lists version 2.0.0.8, updated on 25 September 2026. The store describes Toby 2.0 as "a ground-up rebuild". It has a redesigned new-tab dashboard, a side-panel view that is "on by default", and rebuilt drag and drop and notes. A recent update date means the developer is still working on it.

What permissions does Toby need, and why?

Toby's developer doesn't publish its permission list, and we couldn't see the install prompt. So we can't list its permissions here. Check the prompt when you click "Add to Chrome". What Toby's privacy policy does say is what it can see, and what it says it doesn't read:

Has Toby had security problems?

We found no security incident, store removal or change of owner in our check on 29 September 2026. The store still lists Launch Labs INC as the publisher. The biggest recent change is the end of guest mode. Every user now needs an account, and saved tabs move to Toby's servers.

How can I check Toby myself?

Open the official Chrome Web Store listing and check that the publisher is Launch Labs INC. The "Privacy practices" tab shows the four data types above. When you click "Add to Chrome", the install prompt lists the access Toby wants. Read it, because Toby doesn't publish that list anywhere else.

After you install:

• Use a strong, unique password for your Toby account. Your saved tabs sit behind it.
• Leave the AI features off if you don't want them working on your tab titles.
• Export or delete your data when you stop using Toby. Email hello@gettoby.com to ask.

Good to know

Toby is a good fit if you want your saved tabs behind an account. It is not a local-only tool any more. If you'd rather your tab lists never leave your computer, pick a tool that keeps everything on your device. Session Buddy needs no account and stores its data only on your device.

Read more

• Toby: full review
• Best tab managers for Chrome
• Is Session Buddy safe?
• OneTab alternatives
• Toby alternatives
• How we choose extensions