Privacy Policy

Last updated: June 30, 2026

TL;DR: WebBrain can run with local or bring-your-own API providers, where your keys stay on your device and requests go directly to the provider you select. If you use WebBrain Cloud, the request is sent through our API so we can provide the hosted model, enforce quotas, process subscriptions, and keep privacy-preserving debug logs. WebBrain Cloud does not store prompt text, page content, screenshots, uploaded image data, or model responses by default.

What WebBrain Is

WebBrain is an open-source browser extension for Chrome and Firefox that connects to AI language model providers to help you read, analyze, and interact with web pages. You can use local models, your own provider API keys, or the hosted WebBrain Cloud provider.

Data We Collect

The data we receive depends on the provider mode you choose:

How Your Data Flows

When you use WebBrain with a local model or your own API provider, data flows directly between your browser and the AI provider you have configured:

When you use WebBrain Cloud, your browser sends the request to api.webbrain.one. WebBrain Cloud forwards it to OpenRouter and the selected upstream model provider, currently configured as StepFun. The model response is returned to your browser.

WebBrain Cloud Logs

WebBrain Cloud keeps metadata and error logs so we can debug failures, understand usage, and enforce the free and paid daily allowances. Default request logs may include:

Default request logs do not store prompt text, page content, screenshots, uploaded image data, or model responses. Raw request/response capture may be enabled temporarily for debugging, but it is disabled by default and should be retained only briefly.

Our web server or hosting provider may also keep standard access logs such as IP address, path, timestamp, and user agent for security and operations. These logs are separate from the WebBrain Cloud application request logs described above.

Third-Party AI Providers

WebBrain connects to the AI provider of your choice. Each provider has its own privacy policy and data handling practices:

We encourage you to review the privacy policy of whichever provider you use. When using API keys (as opposed to consumer products), most providers do not use your data for training by default, but please verify with your chosen provider.

Browser Permissions

WebBrain requires certain browser permissions to function. Here is what each permission is used for and why:

No permission is used to monitor, track, or collect your browsing activity.

Act Mode

When you enable Act mode, WebBrain can interact with web pages on your behalf (clicking, typing, scrolling, navigating). This is done via content scripts running in your browser — no data about these actions is sent to us. All actions are performed locally and are visible to you in real time. Act mode requires explicit activation and displays a visible warning banner.

Bundled Skills

WebBrain ships with one skill enabled by default: FreeSkillz.xyz, a first-party service we operate. It can read YouTube video transcripts and resolve or download public media from the hosts declared in the bundled skill manifest. When you use these tools, WebBrain sends only the current or specified URL plus declared options such as transcript language, media kind, maximum height, or filename hint to freeskillz.xyz. It does not receive your page content, chat history, or browsing history. Public media downloads create a short-lived provider job, save the completed file through the browser Downloads API, and then ask the provider to delete the job. You can remove this skill at any time in Settings → Skills, and any additional skills you import yourself are off by default and run only against the HTTPS endpoint they declare.

Cookies & Analytics

The WebBrain browser extension does not use cookies. The webbrain.one website uses Plausible Analytics for aggregate, privacy-friendly page-view metrics. There are no ads or tracking pixels. WebBrain Cloud API request logs are separate from website analytics.

Children's Privacy

WebBrain is not directed at children under 13. We do not knowingly collect any information from children.

Open Source

WebBrain is fully open source under the MIT License. You can audit the complete source code to verify all claims in this privacy policy:

github.com/webbrain-one/webbrain

Changes to This Policy

If we make changes to this privacy policy, we will update the "Last updated" date at the top.

Contact

If you have questions about this privacy policy, you can reach us at: