Privacy Policy

Hermes Connector lets a Hermes agent running on your own computer act inside your browser. It is built to keep everything on your machine.

We collect nothing.

No accounts, no analytics, no tracking, no telemetry, and no remote server operated by us. We never see your browsing, your pages, or your conversations.

Where your data goes

• The extension connects only to your local agent over a loopback connection (ws://127.0.0.1). There is no native host and no external server — nothing leaves your device through the extension.
• Pages you ask the agent to act on are read/controlled locally to carry out your request. Page content is handed to your local agent — never to the extension’s authors or any external service.
• Pairing state and settings (e.g. which agent profile drives this browser) are stored locally with the browser’s storage API. They never leave your machine.

Sensitive data

The extension deliberately redacts sensitive form fields (passwords, one-time codes, payment fields) from the page snapshots it produces, so they are not surfaced to the agent.

Permissions, briefly

• <all_urls>, scripting, activeTab, tabs — connect to your local agent (loopback) and act on the page you point it at.
• storage — remember pairing and settings on your device.
• sidePanel — draw the chat / pairing UI.
• alarms — keep the local connection alive during a task.
• debugger — optional, requested only if you enable trusted-input mode; used solely to dispatch input events to the current tab. Not requested by default.

Your control

Unpair or remove the extension at any time; local pairing and settings are cleared with it. Because no data is ever sent off your device, there is nothing for us to delete on your behalf.

Contact

Questions about this policy: [email protected]