Tandem privacy

Tandem is a Chrome extension the Celados team uses to save the logins of the websites it works on and switch between them, alone or shared with teammates. A saved login is a “Profile”. This policy covers the extension and the Tandem server it talks to. For celados.com itself, see Privacy.

What Tandem sends

Logins you save. When you save a Profile, Tandem sends the server the website’s cookies and the localStorage of its pages, which together hold the login. While a Profile is in use, it sends them again whenever the website changes them, so the saved copy stays signed in. Tandem reads cookies and localStorage only for websites you save or switch with it.

Around a Profile. Its name, whether it is private or shared with the team, and which Profile your browser uses on a website, so teammates see who is on a shared login.

Website names. To list the Profiles of the website in the current tab, Tandem sends the server that website’s domain, not the page address.

Tandem collects no passwords you type, browsing history, location, communications, health or financial data.

Who can read it

A private Profile is readable only by you. A Profile you share with the team is readable, and usable, by every member Celados admits to Tandem, until you stop sharing or remove it. The server is tandem.celados.com (and test.tandem.celados.com for testing), a Cloudflare Worker with Durable Objects, behind Cloudflare Access: it knows you by your Access sign-in, and only admitted members can read or write. The extension never sees your Access credentials.

Team exits

The team can give a website an exit: a proxy server through which every member’s browser reaches that website, so it sees one address for everyone on a shared login. Tandem then routes only that website’s traffic through the proxy; everything else goes as before. The proxy’s address and password come from the Tandem server and stay in your browser.

What stays in your browser

A copy of the Profiles you can see, with their logins, so you can switch while offline, and logins waiting to be sent. Tandem has no analytics, no telemetry and no ads, and nothing is sold or shared.

Who processes it

• Cloudflare: hosting, storage and Access sign-in.
• Webshare: the exit proxy, only for websites the team gives an exit. It carries their traffic, encrypted by the website as usual.

Removing it

Removing a Profile deletes its cookies and localStorage from the server. Signing in to Tandem as someone else clears the copy in your browser, and uninstalling the extension clears everything it kept there. To have something removed, or to learn what we hold about you, write to hello@celados.com.

Changes

When this policy changes, we update the date at the top of the page.