Browser AI 隐私权政策
最后更新：2026 年 10 月 28 日
摘要：Browser AI 的开发者不运营任何服务器，不收集、不接收、不出售，也不共享你的数据。设置和历史都保存在你的设备上。你选择发送的内容，会由浏览器直接发送到你自己配置的 AI Gateway。
1. 扩展处理的数据
| 数据 | 何时处理 | 保存在哪里 | 发送到哪里 |
|---|
| Gateway 配置（名称、Base URL、模型、可选的自定义请求头、超时、Temperature、最大输出 Tokens） | 你在设置页或「连接 AI Gateway」卡片中保存时 | 本机 chrome.storage.local | 用于连接你的 Gateway |
| Gateway API Key | 你填写时 | 本机 chrome.storage.local，只有扩展自身的页面能读取，保存后不再明文显示 | 只作为认证请求头发送给你的 Gateway |
| 你的消息和 AI 回复 | 对话时 | 本机历史记录，按你设置的保留期限保存 | 你的 Gateway，用于生成回答 |
| 当前网页的标题、URL、正文，以及选中文本 | 你在某个标签页打开扩展后（开启「所有网站自动可用」时也包括其他网站） | 发送前只在内存中；发送后，标题和 URL 会随消息保存在历史中，网页正文不写入历史 | 只在你发送带该上下文的消息时，发给你的 Gateway |
| 通过「@」分享的其他标签页（标题、URL、正文） | 你选择这些标签页时 | 同上 | 只在你发送时，发给你的 Gateway |
| 截图和上传的文件 | 你添加时 | 图片附件随对话保存在本机历史中；文档在本机转换成文本 | 只在你发送时，发给你的 Gateway |
| 「操作网页」时读取的页面元素（按钮、链接、输入框的文字、标签和当前值；不包含密码框和文件框的值） | 只在你为某一条消息开启「操作网页」时 | 不保存 | 你的 Gateway，用于决定要点击或输入的元素 |
| 写作助手中的文字和你补充的语境 | 你点击「开始润色」时 | 本次润色历史只保留在当前页面，关闭后不保存 | 你的 Gateway |
| 偏好设置（语言、外观、强调色、技能、快捷方式、历史保留期限、排除的网站、浮动聊天的位置和大小） | 你修改时 | 本机 | 不发送 |
扩展不会收集统计数据、遥测、崩溃报告、浏览历史、位置或广告标识，也不包含任何跟踪代码。
2. 第三方与 AI 处理
Browser AI 不自带 AI 模型。当你发送消息、测试连接或拉取模型列表时，浏览器会把请求直接发送到你填写的 Gateway 地址（例如 OpenAI 兼容或 Anthropic Messages 接口），请求中只包含完成该操作所需的上表数据。
该 Gateway 及其背后的 AI 模型会处理这些数据来生成回答。它们如何保存和使用数据，受该服务的条款和隐私政策约束，而不是本政策。请先阅读你所连接服务的政策，不要发送你无权分享给它的内容。
Browser AI 的开发者不会收到上述任何数据。
3. 权限说明
- activeTab、scripting：在你点击扩展后读取当前网页，以及在网页中显示选区按钮、写作助手和浮动聊天。
- 可选的网站访问权限（http/https）：只在以下情况申请：(a) 你的 Gateway 地址；(b) 用「@」分享其他标签页；(c) 开启「所有网站自动可用」；(d) 在当前网站使用浮动聊天。你可以随时在 Chrome 中撤销。
- 可选的 tabs：使用「@」时列出你打开的标签页。
- storage、unlimitedStorage：在本机保存设置和历史记录。
- alarms：每天清理一次过期的历史记录。
- sidePanel、contextMenus、favicon：显示侧边栏、清理旧版右键菜单、显示分享标签页的网站图标。
4. 保留与删除
- 历史记录按你选择的期限保留：不保存、7 天、30 天、90 天或永久，默认 30 天。固定的对话会一直保留，直到你删除。
- 你可以在历史记录面板删除单条对话或清空所有未固定的历史，也可以在设置中删除 API Key。
- 卸载扩展会删除它在本机保存的全部数据。
5. 安全
API 请求由扩展的后台 Service Worker 发出，网页和内容脚本无法读取你的 API Key。扩展只连接你明确授权的 Gateway 地址；保存非 HTTPS 地址前会提醒你风险。「操作网页」不会输入密码、上传文件、付款、删除数据或发布内容，这些操作需要你自己完成。
6. 儿童
Browser AI 不面向 13 岁以下儿童，也不会有意收集他们的数据。
7. 政策变更
如果本政策有变化，新版本会发布在本页面，并更新上方的「最后更新」日期。
8. 联系我们
关于本政策的问题，请联系：jiri.yao@gmail.com
Browser AI Privacy Policy
Last updated: October 28, 2026
Summary: The developer of Browser AI runs no servers and does not collect, receive, sell or share your data. Your settings and history stay on your device. Content you choose to send goes directly from your browser to the AI gateway you configure.
1. Data the extension handles
| Data | When | Where it is stored | Where it is sent |
|---|
| Gateway settings (name, Base URL, model, optional custom headers, timeout, temperature, max output tokens) | When you save them in Settings or in the “Connect AI Gateway” card | Locally, in chrome.storage.local | Used to contact your gateway |
| Gateway API key | When you enter it | Locally, in chrome.storage.local, readable only by the extension’s own pages and never shown again in plain text | Only to your gateway, as an authentication header |
| Your messages and AI replies | When you chat | Local history, kept for the period you choose | Your gateway, to generate the reply |
| Current page title, URL and main text; selected text | After you open the extension on a tab (or on any site if you turn on “available on all sites”) | In memory until you send. When sent, the title and URL are saved with the message in history; page text is not. | Your gateway, only when you send a message with that context |
| Other tabs you share with “@” (title, URL, text) | When you choose them | Same as above | Your gateway, only when you send |
| Screenshots and uploaded files | When you add them | Image attachments are saved with the conversation in local history. Documents are converted to text on your device. | Your gateway, only when you send |
| Page elements read for “page actions” (text, labels and current values of buttons, links and fields; never the value of password or file fields) | Only when you turn on “page actions” for a single message | Not saved | Your gateway, to decide what to click or type |
| Text and context in the writing assistant | When you click “Start polishing” | The polishing history lives only on the current page and is not saved | Your gateway |
| Preferences (language, appearance, accent color, skills, shortcuts, history retention, excluded sites, floating chat position and size) | When you change them | Locally | Not sent |
The extension does not collect analytics, telemetry, crash reports, browsing history, location or advertising identifiers, and contains no tracking code.
2. Third parties and AI processing
Browser AI does not include an AI model. When you send a message, test a connection or load the model list, your browser sends the request directly to the gateway address you entered (for example an OpenAI-compatible or Anthropic Messages endpoint). The request contains only the data above that is needed for that action.
That gateway and the model behind it process the data to generate a reply. How they store or use it is governed by their terms and privacy policy, not this one. Review the policy of the service you connect to, and don’t send content you aren’t allowed to share with it.
The developer of Browser AI receives none of this data.
3. Permissions
- activeTab, scripting: read the page you opened the extension on, and show the selection button, writing assistant and floating chat on the page.
- Optional site access (http/https): requested only for (a) your gateway address, (b) tabs you share with “@”, (c) the “available on all sites” option, or (d) using the floating chat on the current site. You can revoke it in Chrome at any time.
- Optional tabs: list your open tabs when you use “@”.
- storage, unlimitedStorage: keep your settings and history on your device.
- alarms: delete expired history once a day.
- sidePanel, contextMenus, favicon: show the side panel, remove old menu items, and show site icons for shared tabs.
4. Retention and deletion
- History is kept for the period you choose: not saved, 7, 30 or 90 days, or forever (default 30 days). Pinned conversations are kept until you delete them.
- You can delete single conversations or clear all unpinned history from the History panel, and remove your API key in Settings.
- Uninstalling the extension deletes all of its locally stored data.
5. Security
API requests are made from the extension’s background service worker; web pages and content scripts cannot read your API key. The extension only connects to gateway addresses you have explicitly allowed and warns you before saving a non-HTTPS address. Page actions never enter passwords, upload files, make payments, delete data or publish content — you do those yourself.
6. Children
Browser AI is not directed to children under 13 and does not knowingly collect their data.
7. Changes
If this policy changes, the new version will be published on this page with a new “Last updated” date.
8. Contact
Questions about this policy: jiri.yao@gmail.com
