Privacy Policy

Conduit Browser Extension · Effective March 19, 2026

What Conduit Does

Conduit is a browser extension that captures structured data from websites you visit and makes it accessible through a local server running on your machine. It provides a dashboard for viewing captured data and APIs (MCP and REST) for integration with other local tools.

Data We Collect

We collect no data. Conduit does not transmit any information to external servers, cloud services, or third parties. All data processing happens entirely within your browser and on your local machine.

Specifically, Conduit does not:

• Send browsing data to any external server
• Upload captured content to the cloud
• Use analytics or tracking services
• Share data with third parties
• Store any data outside your local machine
• Collect personal information for any purpose

Data Conduit Processes Locally

On your machine only, Conduit processes the following types of data to provide its features:

• Web history: URLs of pages you visit on supported platforms, used for platform detection and data organization.
• User activity: API responses intercepted from supported platforms (e.g., X.com timelines, YouTube playback data, Amazon order pages) to structure them into readable formats.
• Website content: Page text and DOM elements when you use the browser automation or page reading features.

All of this data is stored in your browser's local storage and served only to localhost. It is never transmitted externally.

Local Server

Conduit runs a local MCP + REST server on localhost:7777 (configurable). This server is accessible only from your own machine. It serves captured data to local applications, AI coding assistants, and scripts that you explicitly connect.

Dynamic Permissions Model (MV3)

Conduit uses a security-first Manifest V3 architecture. We request the absolute minimum permissions at installation and only ask for elevated permissions when you activate a feature that explicitly requires them.

• Base Permissions: activeTab (to query basic page state when clicked), storage (to persist data locally), and scripting (to execute structured data recipes).
• Optional "Advanced" Permissions: Features like the Pro LLM MCP Server require full browser automation. If you enable this, Conduit will ask for <all_urls>, tabs, cookies, and history. You can deny this at any time.
• No Native Messaging: We use an HTTP communication bridge to `127.0.0.1`, avoiding insecure native host binaries.

Third-Party Services

Conduit does not integrate with, send data to, or receive data from any third-party services. There are no analytics SDKs, no telemetry endpoints, and no external API calls made by the extension.

Data Retention

All captured data is stored in your browser's local storage. You can clear all data at any time through the Conduit dashboard. Uninstalling the extension removes all stored data.

Children's Privacy

Conduit does not knowingly collect any data from children under 13. Since no data is collected from any user, this policy applies equally to all ages.

Changes to This Policy

If we update this privacy policy, the changes will be posted on this page with an updated effective date. Since Conduit collects no data, significant changes are unlikely.

Contact

For questions about this privacy policy or the Conduit extension:

• Email: m.gantlett@gmail.com
• Website: sophialabs.gantlett.io