Xtaff home / Xtaff Browser

Xtaff Browser Privacy Policy

Last updated: 2026-11-09 · Operated by 熙宇科技

Xtaff Browser is a Chrome extension that connects a local AI assistant to a browser through a local MCP host. This policy applies to the extension, not the separate Xtaff Gmail connector.

Data processed and why

To carry out the user's browser tasks, the extension can process tab identifiers, URLs and origins; page text, structure, form information and screenshots; and diagnostic information such as console messages, network paths or statuses, and dialogs. Pages may contain personal or sensitive information. The extension can also interact with websites and handle files when the assistant requests those actions.

The extension controls tabs created in or explicitly brought into the Xtaff tab group. By default, access to each site requires the user's approval; the user can instead enable full authorization for eligible sites in that group. Cross-origin frames are subject to the selected authorization mode.

Local processing and sharing

The extension communicates with a native host and the user's AI assistant on the same computer. It does not use a developer-operated cloud relay or analytics service. Page data and screenshots returned to the assistant may be retained or sent to an AI model provider or other service by that assistant, depending on the user's assistant and its configuration. Such processing is governed by the relevant provider's policies. Browser actions requested by the assistant can also send information to the websites the user interacts with.

We do not sell user data or use it for advertising. Xtaff Browser's use of information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Storage and controls

Site approvals, authorization mode, stop state, site playbooks, and pending playbook drafts are stored locally in Chrome. Playbooks contain site-specific knowledge proposed by an assistant and may be shared with connected local assistants on request. Proposals are sanitized before storage and become active only after user approval; sanitization may not remove all sensitive information. Temporary browser diagnostic records are held in memory and released when the corresponding tab is closed; certain authorization changes clear them sooner. The assistant or its provider may keep its own records under its own settings and policies.

Users can revoke approved sites, disable full authorization, stop or resume control in the extension popup, and remove a tab from the Xtaff group. Users can review, approve, delete, export, and restore playbooks through the extension options page. Removing the extension clears its local extension storage.

Sensitive information

The extension attempts to identify and redact sensitive fields, and masks recognized sensitive fields in screenshots. If screenshot masking cannot be applied, capture is refused. These protections are not comprehensive: secrets displayed as ordinary text or in unrecognized fields may still appear in page data, diagnostics, or screenshots. Review what the assistant can access before approving a site.

Contact

For privacy questions, contact qiweiview@gmail.com.