Browser Companion — Privacy Policy

1. What this policy covers

This policy applies to the BreatheReply — Browser Companion browser extension (Chrome, Edge, Brave, Vivaldi, Opera, Firefox and other Chromium-based browsers). It covers the extension only. The desktop application has its own terms and privacy policy.

2. What the extension reads

The extension does exactly one thing: it tells the BreatheReply desktop app which website you are currently on, so the app can decide whether the reply window should be available there.

To do that, it reads:

• the hostname of your active tab — for example mail.example.com. The hostname only: not the full URL, not the path, not the query string, not the page title.
• which browser you are using ("Chrome", "Edge", "Firefox" and so on), so the app can tell the sources apart.
• a one-time connection token, issued to the extension by the desktop app over that same loopback connection and sent back so the app can confirm the message came from this extension. The token is randomly generated, valid for 60 seconds, discarded after a single use, contains no personal data, and is never stored or sent anywhere else.

The extension does not read or collect:

• page content, text, images or metadata of any kind;
• anything you type — form fields, search terms, messages, passwords;
• a site's cookies or local storage, or any session data;
• your browsing history, bookmarks, downloads, or any tab other than the active one;
• your name, email address, account, IP address, or any other identifier of you.

3. Where that data goes

The hostname is sent over a loopback WebSocket connection (ws://127.0.0.1) to the BreatheReply desktop app running on the same computer as the browser.

• It does not leave your device — the connection never touches the internet.
• No BreatheReply server receives it, because none is involved.
• There is no analytics, advertising or crash-reporting service in the extension, and nothing is shared with any third party.
• The extension holds it in memory only: no database, no chrome.storage, no cookies, no files written. Close the browser and it is gone.

4. Permissions, and why

Store listings summarise each permission in deliberately alarming language. Here is what each one is for in this extension:

• tabs — shown as "read your browsing history". It is used only to ask the browser for the currently active tab's URL, from which the hostname is extracted and everything else discarded. The extension does not enumerate, store or transmit your history.
• alarms — browsers suspend background workers to save power; this timer wakes the extension so it can re-establish the local connection.

The extension requests no website access permission (host_permissions is empty) and injects no scripts into any page. It has no technical ability to read or change a page's content, and none to act on a site's behalf.

5. Your control

Disabling or uninstalling the extension stops all of the above immediately, and there is nothing left behind to delete. Which sites offer the reply window is decided by settings in the desktop app, not by the extension: the extension carries no remote switches and takes no instructions from any server.

6. Children

The extension is a companion to a desktop productivity tool. It is not directed at children, and it collects no information from anyone, children included.

7. Changes

If a future version of the extension needs to handle any additional information, this page will be updated before that version ships, and the "last updated" date above will change.

8. Contact

Questions about this policy: use the contact page.