BroMindBroMind Privacy Policy
BroMind is a browser extension that lets you chat with AI models running on your own machine. Its entire design goal is that your data stays with you. The claims below about what does and doesn't leave your device are checkable from the extension's network traffic (e.g. your browser's network inspector). BroMind is proprietary, closed-source software.
What BroMind collects and transmits to us
Where your data goes
- Prompts, chats, and page content are sent only to the model server you configure — by default a local server on your own machine (
localhost/127.0.0.1, e.g. Ollama). If you deliberately configure a server on another machine, your prompts go there; BroMind warns you before you save an unencrypted (http://) non-local endpoint. - Page content is read only when you ask (page-context toggle, Summarize, a right-click selection action, or the selection toolbar below), only from the active tab, and is sent only to your configured model server.
- Selection toolbar. When enabled (default on), a small toolbar appears when you select text — but only on sites you have granted BroMind access to (plus
localhost/127.0.0.1). On other sites nothing is injected at all. The toolbar reads your current selection into memory to position itself; selection text is sent somewhere (to your model server, for a rewrite or a chat action) only when you click one of its buttons. Turn it off any time in Settings → Selection toolbar. - Attached files. PDFs and images you attach to a chat are processed locally and sent only to your configured model server as part of that chat.
- Exports are yours to guard. The JSON chat export is a full-fidelity backup: for chats that used page context, an attached PDF, or attached images, it includes that content. Treat exported files like the chats themselves before sharing them (the per-chat Markdown copy omits that content).
- Conversations and settings (including any API key you enter) are stored locally in your browser's extension storage and IndexedDB. They never leave your machine except as part of requests to your configured server. Settings → Danger zone → "Wipe all BroMind data" deletes all stored data — chats, settings, keys — and revokes any per-site or broad host permissions you granted at runtime.
The one optional third-party request
The starter-model catalog used during first-run setup ships inside the extension. Only if you explicitly click "Check for newer suggestions" does BroMind attempt to fetch a static JSON list from GitHub (raw.githubusercontent.com); if that request fails, the built-in list is used. Like any web request, the attempt reveals your IP address to GitHub. It sends no other data, and it never happens automatically.
The Ollama connection fix
Ollama rejects requests from browser-extension origins by default. When the "Ollama connection fix" is enabled (default on), BroMind rewrites the Origin header only on its own requests to localhost/127.0.0.1 so your Ollama accepts them. This never affects other websites, other extensions, or requests to any other host, and you can turn it off in Settings.
Permissions
| Permission | Used for |
|---|---|
activeTab + scripting | Reading the current page when you ask a question about it. |
storage | Your settings and chat history, locally. |
sidePanel (Chromium) | The chat panel UI. |
declarativeNetRequestWithHostAccess | The Ollama connection fix described above. |
contextMenus | The right-click selection actions. |
scripting (dynamic registration) | The selection toolbar is registered as a content script only for the origins you have granted (and localhost). It is never registered — and never runs — on a site you have not granted. |
http://localhost/*, http://127.0.0.1/* | Talking to your local model server. |
| Optional host access | Requested at runtime, per site, only when you configure a non-local server, grant a specific site for page reading, or (Firefox fallback) allow page reading broadly. Granting a specific site also enables the selection toolbar on it. The broad all-sites grant does not enable the toolbar everywhere. Revocable in Settings. |
Private browsing
On Chromium browsers BroMind runs in incognito in "split" mode: chats and page content from an incognito session live in incognito's ephemeral storage and are gone when the session ends. Extension settings (configured servers, active model) are shared with your normal profile — that is how Chromium's split mode works for extension settings storage. On Firefox, BroMind is not available in private windows (Firefox lacks split mode; we chose unavailability over silently persisting private-window chats).
Limited Use
BroMind's use of information received from browser APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements: page content and selections are used only to provide the assistant features you invoke, are sent only to the model server you configure, and are never sold, shared, or used for advertising or creditworthiness purposes.
Changes
Any future change to data handling will be prominently disclosed in the changelog and the store listings before it ships.
Contact
Questions or concerns: open an issue on the BroMind GitHub tracker or write to contact@bromind.dev.