TonoLive Computer Browser — Privacy Policy

English

What this extension is. This notice covers TonoLive Computer Browser using the v2 local bridge. The Chrome extension connects only to TonoLive Desktop, the companion application you install and run on the same computer. It lets TonoLive Desktop perform browser tasks that you explicitly request.

Supported operations and the data involved. For an approved browser session over HTTP(S), the extension performs five operations: open, read, click, fill, and stop. Each task is limited to the exact origin you authorized in TonoLive Desktop Core. The extension handles the page URL and title, visible page text, relevant session and tab metadata, and content you supply for a fill action. It has no operation for browsing history, bookmarks, reading list, top sites, screenshots, or downloads.

Credentials and sensitive fields. The extension does not collect raw cookies or password files, and read, click, and fill reject password and file-upload fields. This does not mean a web page itself can never contain sensitive information you choose to view or fill; use your own judgment on such pages.

Where data goes. The extension communicates directly only with the local native messaging host installed by TonoLive Desktop. It makes no direct calls to TonoLive servers, model providers, analytics, advertising, or tracking services.

Desktop and cloud processing. To complete a task you request, TonoLive Desktop may send the task and relevant page results to TonoLive cloud services and to the model provider you selected. TonoLive cloud may process and retain delivered results according to your task, product settings, and applicable terms. Processing therefore does not necessarily stay on your device.

Local storage. The extension keeps no database of page content. Chrome profile local storage holds the public installation pin (a local verification public key) and its fingerprint together with a trusted or disconnected state, plus settings. Session storage holds stopped-session, tab, and origin metadata. Page content is processed transiently in memory for an active operation. No private key or Desktop core token is stored in the extension.

Connection and action permissions. The public pin verifies the local connection between the extension and TonoLive Desktop. It does not grant website access or permission to act. Website allowlists and action authorization, including confirmation when required, are controlled by TonoLive Desktop Core. A click does not always require a new prompt, and confirming an action does not grant access to a new website.

Your control. The extension popup offers Connect and Disconnect. A successful Disconnect is durable, and the connection stays off after a browser or extension restart until you choose Connect again. You control browser-session stopping and authorized operations in TonoLive Desktop. You can disable or remove the extension in Chrome; uninstalling the native host prevents new local connections. Stopping does not undo effects already made on a website or erase results already transferred.

Permissions. The extension requests exactly debugger (performs authorized page actions in the approved session and origin), nativeMessaging (talks to the local host), storage (connection state, settings, session metadata), tabs (associates a session with its tab), and alarms (watchdog). It declares no host permissions; that does not mean the debugger cannot act on pages you have authorized.

Children and changes. This extension is not directed to children. We will update this policy as needed and revise the date above.

Contact. services@longtreeai.com · tonoai.cn