Chrome Extension Privacy Policy

The AquaBrain Web Clipper is a Chrome extension that saves the page you're on — or any URL — into your AquaBrain Brain. This page covers only what the extension itself does with your data. For everything else AquaBrain handles, see the main Privacy Policy.

1. Single purpose

Capture web pages, URLs, and short notes into your AquaBrain Brain as thoughts or journal notes. Nothing else.

2. What the extension can access

The extension requests three Chrome permissions and one network host:

• activeTab + scripting — read the content of the page you're on, but only after you click the extension icon and choose an action. With no click, the extension reads nothing.
• storage — keep your access token and the API base URL in chrome.storage.local so you don't have to paste them on every use.
• https://api.aquabrain.ai/* — the only host the extension is allowed to talk to over the network.

The extension does not request access to your browsing history, bookmarks, downloads, identity, all open tabs, cookies, or any other site.

3. What gets sent, and when

The extension sends data over the network only when you click one of its three actions in the toolbar popup:

• Save as thought — sends the readable text content of the current page (or the text you have highlighted), plus the page title and URL, to https://api.aquabrain.ai/v1/thoughts/capture.
• New note — sends the page title, the page URL, and any short note you typed, to https://api.aquabrain.ai/v1/journal-notes.
• Add to note — fetches a note you select from the API, appends the page URL, and saves the result back.

Every request includes your AquaBrain Personal Access Token in the Authorization header. Nothing is sent to any other server. There is no telemetry, no usage analytics, no third-party tracking.

4. What the extension stores locally

• Your AquaBrain Personal Access Token, in chrome.storage.local, on this device only.
• The configured API base URL, in chrome.storage.local.

That's all. The extension does not keep a local history of what you've captured — your captures live in your Brain on the server.

5. What the extension never does

• Read pages without an explicit click.
• Run remote code. The whole extension ships in the package you install; no script is downloaded and executed at runtime.
• Show ads, run analytics, or send data to any third party.
• Track your browsing across sites.
• Sell, rent, or share data with anyone.

6. Sub-processors

Captured content travels to the AquaBrain API and, from there, through the same sub-processors listed in the main Privacy Policy — Supabase (storage), Railway (API hosting), OpenRouter (AI embeddings and atomic memory generation), Sentry (error reports). The extension itself adds no new sub-processors.

7. Your controls

• Revoke the token — in the AquaBrain web app go to Connect → Chrome Extension and regenerate or delete the chrome-extension Personal Access Token at any time. The old token stops working immediately.
• Delete what you captured — open the web app or iOS app and delete any note or thought.
• Uninstall — removing the extension from Chrome erases the stored token and API URL from your device.
• Delete your account — see section 7 of the main Privacy Policy.

8. Changes

If this policy changes materially, the new version is published here and the date below is updated.

9. Contact

Questions or requests about the extension or your data: hello@aquabrain.ai.

Last updated: 24 May 2026.