The browser extension and your privacy

Updated 17 October 2026

BaoCode’s browser extension lets the agents in BaoCode, the desktop app, use tabs of your browser: open pages, read them, click, type and take screenshots, as you watch. This page says what it reads, and where that goes.

Only the tabs you share

The extension works in the tabs of the yellow “BaoCode” tab group alone: those an agent opened, and those you put there yourself or share with the extension’s toolbar button. It doesn’t read your other tabs, your history, your bookmarks, your passwords or your cookies. It looks at the list of your tabs only to tell which are in the group. Take a tab out of the group, or click the toolbar button on it, and it’s no longer shared.

What it reads, when asked

In a shared tab, when an agent asks: the page’s address, title and text, the elements on it to click or type into, screenshots, what the page logs to its console, the requests it makes, and its performance. The extension reads these through the browser’s debugger, which is why Chrome shows a bar saying the tab is being debugged.

When an agent asks to watch you, and you agree, it records your clicks and what you type in that tab until you click Done. What you type in a password field is never recorded.

Where it goes

To BaoCode on the same computer, and nowhere else: the extension talks to BaoCode through your browser’s native messaging, never over the network. Neither the extension nor BaoCode sends any of it to us; we have no server it could go to.

BaoCode gives what the agent asked for to the agent, as it would a file you share with it. The agent sends its conversation, this included, to the AI model you use with it (for Claude Code, Anthropic’s, or the provider you set up), under that provider’s terms.

What it never does

• No analytics, no tracking, no ads. The extension sends nothing about you or your use of it to anyone.
• No code from elsewhere: everything it runs is in the extension.
• Nothing is sold or handed to a third party.
• The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Turning it off

Quit BaoCode and the extension has no one to talk to. In BaoCode, Settings → Browser turns off the agents’ use of the browser. Or remove the extension from your browser.

Questions

BaoCode and the extension are open source: read the extension’s code, or open an issue.