Is Nest Safe? It Reads Your Tabs, Not Your Pages

Nest sees the title, address and icon of each tab so it can manage them, and keeps them in your browser. It reads no page content, has no AI feature, and sends your tabs nowhere unless you turn on Pro sync.

Add to Chrome — free

What Nest asks Chrome for, in plain words

Nest 1.8.0 asks Chrome for seven permissions and for access to all sites. These five run the tab manager; the rest are about where Nest's panel opens, in the next section. Nest does not ask for Chrome's history, bookmarks, cookies or downloads permissions.

tabs: reads each tab's title, address and icon to list and sort your tabs, find duplicates, save Sessions and snoozes, and notice tabs a restart did not bring back
tabGroups: saves and restores your Chrome tab groups by name and colour, can add tabs to groups you made, and creates a group only when you ask
storage: keeps your Categories, Sessions, Notes, snoozes, Vault snapshots, settings and Autopilot's records in your browser
alarms: reopens snoozed tabs on time and runs Autopilot's checks while Nest is closed; Autopilot's alarms make no network request
notifications: reports Autopilot's results and confirms your own actions, in fixed words with counts, never a page title or address

Access to all sites: one use, and how it is limited

This is the permission extension scanners flag as high-risk, and the concern is fair: an extension with it could read any page. Nest uses it, with the scripting permission, for one thing: the overlay, the panel that opens over the page you are on when you click the Nest icon. That can be any page, so Nest cannot name the sites in advance. Choosing the side panel does not remove the permission from Nest; it means Nest opens without using it.

No automatic content script: nothing is added to a page when it loads
The overlay goes only into the tab where you open Nest, after you click its icon or press its shortcut
The overlay draws Nest's own interface in a Shadow DOM and reads nothing from the page
sidePanel: Nest beside the page, which needs no page access and also works on Chrome's own pages
Nest accepts messages only from its own parts, and shows tab titles as plain text, never as code

To use the side panel, switch on “Open Nest in the side panel” in Account. The overlay stays the default.

What stays on your computer, and what leaves it

Nest keeps its data in your browser's own storage. Without an account, the only thing it sends on its own is anonymous usage events, which are on until you turn them off. With Pro sync on, your tabs, Categories, Sessions and Notes also go to your account on Nest's own server, so they reach your other devices.

Autopilot's records stay on this computer and never sync, on any plan
That includes the last time you used each page address (at most 2,000), recorded only while Suspend or Tidy away is on
Vault snapshots, snoozed tabs and Automatic Sessions never sync either
Tabs from incognito windows are never saved or synced
Usage events carry an event name from a fixed list, a timestamp, the version and a random install ID
No page addresses, titles or content in usage events, and a switch in Account to turn them off

The full detail, including what an account and payments involve, is in the privacy policy. What Autopilot does with its records: Autopilot.

What Nest does not do

These hold for Nest 1.8.0. Earlier versions had an optional assistant, Chat, that could read a page's text when you asked it to. Version 1.8.0 removed it, and with it the only code that read page content.

Reads no page text, links or other page content
Has no AI feature, so nothing about your tabs goes to a model
Puts no page title or address in a notification
Does not sell your data or use it for personalized advertising
Closes tabs on its own only under rules you turn on, and writes each one down before it closes

What you are trusting, and how to check

Nest is not open source, and it is built by one developer. Like any extension with access to all sites, installing it means trusting the person who publishes it, including with future updates. What Nest can offer is a narrow shape for that trust: one broad permission with one use, no page reading, and tabs that stay in your browser unless you turn on Pro sync. Each part can be checked.

chrome://extensions → Nest → Details lists every permission and the site access Nest holds
The code Chrome installs is plain JavaScript, not minified, with no third-party libraries
Account → Privacy & Settings turns usage events off
Backup → Export saves your open and closed tabs as .html or .json, free
Account → Delete account removes your account and its synced data from Nest's servers

For what to look for in any tab manager, read Are tab manager extensions safe?

FAQ

Is Nest safe to use?

Nest reads the title, address and icon of each tab, which it needs to list and manage them, and keeps them in your browser. It reads no page content, has no AI feature, and sends your tabs nowhere unless you turn on Pro sync. Its one broad permission, access to all sites, is used only to open its panel over the page you click from. No extension can honestly be called risk-free, so this page sets out what Nest can access and how you can check it.

Why does Nest need access to all websites?

For the overlay: when you click the Nest icon, Nest opens its panel over the page you are on, and that can be any page, so it cannot name the sites in advance. Nothing is added to a page when it loads, the panel reads nothing from the page, and it goes only into the tab where you open it. If you switch on "Open Nest in the side panel" in Account, Nest opens beside the page instead and puts nothing into it.

Does Nest read my pages or passwords?

No. Nest 1.8.0 has no code that reads the text or links of a page, or anything you type into one, and it does not ask for Chrome's cookies, history, bookmarks or downloads permissions. What it does read is each tab's title, address and icon. Page addresses can contain things like search terms, so it matters where they go: they stay in your browser unless you turn on Pro sync.

What data leaves my browser?

Without an account, only anonymous usage events: an event name from a fixed list (such as "a tab was snoozed"), a timestamp, the extension version and a random install ID, sent in batches about every six hours. They never include page addresses, titles or content, and you can turn them off in Account, under Privacy & Settings. If you create an account, your email address goes to Nest's server. If you turn on Pro sync, your tabs, Categories, Sessions and Notes go to your account on Nest's own server so they reach your other devices; Vault snapshots, snoozed tabs, Automatic Sessions and Autopilot's records never sync. Payments go through Stripe, and Nest never sees card details.

Does Nest use AI on my tabs?

No. Nest 1.8.0 has no AI feature. Chat, an optional assistant in earlier versions, was removed in 1.8.0, together with the only code that read page text. Autopilot is a set of fixed rules that run in your browser, not a model or a cloud service.

Is Nest open source?

No. Nest's code is not public, and it is built by one developer, so using it means trusting that developer, as with any extension that has access to all sites. What you can check is its permissions at chrome://extensions and what the privacy policy commits to. The extension Chrome installs is plain JavaScript, not minified, with no third-party libraries.

How do I delete my data?

Uninstalling Nest removes the data it keeps in your browser. If you have an account, Account → Delete account deletes it and its synced data from Nest's servers, within 30 days as the privacy policy commits; the data on your computer stays until you uninstall. To keep a copy of your tabs first, use Export in Backup, as a webpage (.html) or a data file (.json), free.

Install it, then check it

Free, no account. Add Nest, open chrome://extensions, and compare what it holds with this page.

Add to Chrome