Privacy Policy

Last updated: June 18, 2026

What WebBrain Is

WebBrain is an open-source browser extension for Chrome and Firefox that connects to AI language model providers to help you read, analyze, and interact with web pages. You can use local models, your own provider API keys, or the hosted WebBrain Cloud provider.

Data We Collect

The data we receive depends on the provider mode you choose:

• Local or bring-your-own API providers - WebBrain does not send data to WebBrain servers. Your API keys are stored locally in browser extension storage and requests go from your browser to the provider you configured.
• WebBrain Cloud - Requests are sent to api.webbrain.one and forwarded to our upstream model provider. We receive the prompt, page context, screenshots, images, and tool context needed to answer that request, but we do not store that request content by default.
• Quota and subscription records - We store a stable WebBrain device identifier for quota enforcement. For paid subscriptions, Stripe payment events are stored with subscription status and Stripe customer, subscription, checkout session, and payment link identifiers.

How Your Data Flows

When you use WebBrain with a local model or your own API provider, data flows directly between your browser and the AI provider you have configured:

• Page content — When you ask a question about a page, the relevant page content is sent directly from your browser to your chosen AI provider's API. WebBrain does not relay, intercept, or store this data.
• API keys — Your API keys are stored locally in your browser's extension storage (chrome.storage.local or browser.storage.local). They are never transmitted to us or any third party. They are only sent directly to the AI provider you have selected.
• Conversations — Your chat history exists only in your browser's memory during the session. It is not persisted to disk or sent anywhere other than to your configured AI provider for generating responses.

When you use WebBrain Cloud, your browser sends the request to api.webbrain.one. WebBrain Cloud forwards it to OpenRouter and the selected upstream model provider, currently configured as StepFun. The model response is returned to your browser.

WebBrain Cloud Logs

WebBrain Cloud keeps metadata and error logs so we can debug failures, understand usage, and enforce the free and paid daily allowances. Default request logs may include:

• Request metadata - request id, timestamp, endpoint, client label, request size, model id, stream flag, message count, tool count, image count, and latency.
• Quota metadata - hashed device id, tier, daily allowance, token counts, estimated request cost, and daily usage totals.
• Network/debug metadata - hashed IP address, hashed user agent, HTTP status, upstream status, and short upstream error snippets.

Default request logs do not store prompt text, page content, screenshots, uploaded image data, or model responses. Raw request/response capture may be enabled temporarily for debugging, but it is disabled by default and should be retained only briefly.

Our web server or hosting provider may also keep standard access logs such as IP address, path, timestamp, and user agent for security and operations. These logs are separate from the WebBrain Cloud application request logs described above.

Third-Party AI Providers

WebBrain connects to the AI provider of your choice. Each provider has its own privacy policy and data handling practices:

• OpenAI — openai.com/privacy
• Google (Gemini) — ai.google.dev/terms
• Anthropic (Claude) — anthropic.com/privacy
• OpenRouter — openrouter.ai/privacy

We encourage you to review the privacy policy of whichever provider you use. When using API keys (as opposed to consumer products), most providers do not use your data for training by default, but please verify with your chosen provider.

Browser Permissions

WebBrain requires certain browser permissions to function. Here is what each permission is used for and why:

• activeTab / tabs — To read the content of the current page when you ask a question, and to manage per-tab conversations.
• scripting — To inject content scripts that can read page content and perform actions in Act mode.
• sidePanel (Chrome) / sidebar_action (Firefox) — To display the WebBrain chat interface as a side panel.
• storage — To save your settings (selected provider, API key, preferences) locally on your device.

No permission is used to monitor, track, or collect your browsing activity.

Act Mode

When you enable Act mode, WebBrain can interact with web pages on your behalf (clicking, typing, scrolling, navigating). This is done via content scripts running in your browser — no data about these actions is sent to us. All actions are performed locally and are visible to you in real time. Act mode requires explicit activation and displays a visible warning banner.

Cookies & Analytics

The WebBrain browser extension does not use cookies. The webbrain.one website uses Plausible Analytics for aggregate, privacy-friendly page-view metrics. There are no ads or tracking pixels. WebBrain Cloud API request logs are separate from website analytics.

Children's Privacy

WebBrain is not directed at children under 13. We do not knowingly collect any information from children.

Open Source

WebBrain is fully open source under the MIT License. You can audit the complete source code to verify all claims in this privacy policy:

github.com/esokullu/webbrain

Changes to This Policy

If we make changes to this privacy policy, we will update the "Last updated" date at the top.

Contact

If you have questions about this privacy policy, you can reach us at:

• GitHub: github.com/esokullu/webbrain/issues
• Website: emresokullu.com