Privacy Policy — ToClaw Browser Automation Extension
Last updated: 2026-04-01
1. Data Collection
ToClaw does not collect, store, or transmit any personally identifiable information to external servers. The extension operates entirely on the user's local machine.
2. Data Processed Locally
To provide its automation features, ToClaw temporarily processes:
- Page content (DOM structure, text, screenshots) — used only to fulfill the current automation command and returned to the user's local server
- Browser cookies and storage — only when the user explicitly requests session export/import
- Operation history — stored locally in Chrome extension storage on the user's device only
3. Network Communication
All network communication is restricted to the user's own machine via local WebSocket connections (ws://127.0.0.1). Every connection requires a cryptographic handshake: the extension and the local server exchange an HMAC-SHA256 signed timestamp to verify endpoint identity, preventing web pages or third-party processes from connecting to the local server. No data is sent to any third-party server, cloud service, or remote endpoint.
4. Permissions Usage
| Permission | Purpose |
|---|---|
debugger |
Capture full-page screenshots and execute JavaScript via Chrome DevTools Protocol |
cookies |
Export or import session cookies only when the user explicitly requests it |
tabs / scripting / activeTab |
Navigate, interact with, and inspect web pages per user commands |
storage |
Save operation history locally on the user's device |
host_permissions (<all_urls>) |
Inject content scripts on any page the user directs their automation to visit |
5. Data Sharing
ToClaw does not share any data with third parties. No analytics, advertising, or tracking is performed.
6. Data Retention
Operation history is stored locally and can be deleted at any time via the extension dashboard. No data persists after the user clears the history.
7. Children's Privacy
ToClaw does not knowingly collect any information from children under 13.
8. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected by updating the "Last updated" date above.
9. Contact
For questions about this privacy policy, please open an issue at the project's source repository.