Browser Agent (Chrome extension) · Effective 24 October 2026 (updated: MCP connections, no passphrase, memory, history, skills and approval settings) · Publisher: Forge Consultancy, India
| Data | Where it is kept | Protection |
|---|---|---|
| AI provider keys (API keys or the key issued by OpenRouter sign-in) | Chrome extension storage on your device | Kept in the extension's own storage, which web pages and other extensions cannot read. Sent only to the provider it belongs to. There is no passphrase, so anyone with access to your computer account can read it, as with other saved browser data. |
| Settings (provider, model, recent models), skills you add, and the site permissions you set | Chrome extension storage on your device | Not sent anywhere. |
| Conversation history | Browser storage on your device (IndexedDB) | Kept for 90 days, then deleted automatically. |
| Memory: short facts and preferences the agent learns while you work (for example "use tables"), and summaries of past tasks | Browser storage on your device (IndexedDB) | Passwords, card numbers, codes, keys and ID numbers are refused and never stored. |
When you ask the agent to do something, Browser Agent sends a request directly from your browser to the AI provider you selected: OpenRouter, Anthropic, OpenAI or Google. The request contains your message, the text and element labels of the page the agent reads to answer you, and the results of the agent's steps. That provider's own privacy policy and terms apply to those requests.
To answer well, each request also includes the few memories and past-task summaries that match your current message, never your whole history.
To list the models your key can use, Browser Agent asks the provider for its model list. When you choose "Sign in with OpenRouter", the sign-in happens on OpenRouter's website, and OpenRouter returns a key for your account to the extension.
If you connect an MCP server in Settings, Connections, the agent sends that server the requests needed for the tools you use (the tool name and its inputs), with the access token that server issued to you. Sign-in happens on that server's own page. The token stays in the extension's storage on your device, and you can remove the connection at any time.
Browser Agent sends nothing to Forge Consultancy and has no analytics, tracking, advertising or telemetry.
The agent reads a page only when you ask it to work on that page. It uses the content only to carry out your request. It refuses to type into password, card number, card security code and one-time code fields, in every mode. By default, every click, every piece of typing and every page change needs your approval in the panel. You can always allow one type of action on a site you trust; this rule is saved only on your device, and you can reset it in Settings. You can also turn on bypass, which allows all actions without asking until you close the panel.
The use of information received by Browser Agent adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell user data, do not use or transfer it for purposes unrelated to the extension's single purpose, and do not use or transfer it to determine creditworthiness or for lending.
Browser Agent is not directed at children under 13 and does not knowingly process their data.
If this policy changes, we will update this page and its effective date. Material changes will also be noted in the extension's release notes.
Forge Consultancy, 560/2, New Patel Park, Barahi Road, Line Par, Bahadurgarh, Haryana 124507, India · forgeconsultancy.in@gmail.com · +91 94167 32289