Privacy

GroupTab has no sign-up, no email, no ads and no cookies. Nobody is profiled, and nothing is sold.

We use Vercel Web Analytics to see how many people visit and how they found us: the page, the site that linked here, the country and the kind of device. It uses no cookies. A tab's link is removed before anything is sent, so a visit to a tab counts only as “a tab page”, never which one.

To see whether GroupTab is working for people, we keep a few daily totals, like “tabs started today: 12” or “payments confirmed today: 30”. Each event adds 1 to that day's number and nothing else is saved: not the tab, the names, your phone or your address. Your browser remembers whether it has already counted opening a tab, so opening it twice counts once. We also count errors the same way: how many happened, never what was on the screen. The totals are kept for about 13 months.

The trip name and currency; the names people enter; expenses (description, amount, date, who paid, who's in); payments people mark as sent or received; and a history of changes. If someone adds a Venmo username or Cash App cashtag, it's shown to everyone on that tab so they can be paid.

Anyone with the tab's link can see everything on it and add to it. The link is long and random, so it can't be guessed. Share it only with your group. If you paste it into a group chat, the chat's link preview shows who pays whom.

PINs are never stored as typed: we keep a salted, slow hash (scrypt). Each phone that picks a name gets a random key; we store only a hash of it. Your browser remembers which name you are on each tab, and the tabs you've opened, in its own local storage. That never leaves your device.

A tab is erased automatically 90 days after its last change. The person who started a tab can erase it at any time from their name menu: “Delete this tab”. That deletes it for everyone, immediately.

To stop spam, we briefly count requests per network address. We store a one-way hash of the address, never the address itself, and the counts expire within an hour.

Tabs are stored with Upstash (Redis) and the app is hosted on Vercel. Like any web host, Vercel keeps standard request logs for a limited time.

The person who started a tab can delete it from their name menu, which erases it for everyone at once. Anyone can remove an expense, and people with no expenses or payments can be removed from a tab. For anything else, like taking your name off a tab someone else started, email us below.