Draft, not yet reviewed. This document still contains unfilled placeholders and has not been reviewed by a lawyer. Do not rely on it, and do not accept paying customers against it.
Browser extension privacy policy
Last updated 15 October 2026
The Smushbug browser extension captures what a coding agent needs to fix a bug on the page you are looking at. It is built so that nothing leaves your browser unless you choose to send it. This policy covers the extension only. The hosted service is covered by the Smushbug privacy policy.
The short version
- No account, no analytics, no tracking, no ads.
- Captures stay in your browser. We never receive them.
- Data leaves your browser only when you copy it, download it, or press "Send to Smushbug", which sends one capture to the address you typed in.
- We do not sell or share data, because we do not have any.
What the extension reads
On every page you visit, the extension keeps a short rolling record in that page's memory, so the history is there when you need it:
- the last 60 console errors and warnings, uncaught errors and unhandled promise rejections, with their stack traces;
- the last 60 failed network requests: method, address with its query string removed, status code and duration. Request and response headers and bodies are never read;
- the last 60 actions: what you clicked, which form fields you typed in (never what you typed), Enter and Escape presses, and page changes within the tab, including their addresses.
This record is never stored or sent. It is discarded when you close or reload the page.
When you open the extension or press its shortcut on a tab, it also reads:
- a screenshot of the visible part of that tab;
- the page address and title;
- any text you have selected;
- the HTML of the element you last clicked, with every form value replaced by [redacted];
- browser version, platform, language, time zone, window and screen size, and light or dark mode.
Where it goes
- The popup. A capture is shown to you and held in memory. Closing the popup discards it.
- Your clipboard or downloads. "Copy for agent", "Copy image" and "Download image" put the capture where you asked. What happens next is up to you and the tool you paste it into.
- Your library. "Save to library" stores the capture, including the screenshot, in your browser's own storage (IndexedDB) on your device. The library keeps up to 200 captures and drops the oldest after that. You can delete one or all of them from the library page, and uninstalling the extension deletes them all.
- An endpoint you choose. "Send to Smushbug" sends one capture to the URL you entered under "Smushbug endpoint", and nowhere else. If that URL is a Smushbug project, the Smushbug privacy policy covers it from then on. If it is your own server, your own policies do. The extension sends nothing until you enter a URL and press the button.
The endpoint URL you enter is saved in the extension's settings storage on your device, together with the load times of the last time the popup opened (numbers only, no page content). If you use the light and dark switch, that choice is saved on your device too. None of it is sent anywhere.
Permissions
- Read and change data on all sites (all-sites host access and content scripts): needed to record console errors and failed requests from the moment each page starts loading, and to take the screenshot. The code runs on every page so that the history exists when something breaks. It records nothing outside the lists above.
- activeTab and scripting: to capture the tab you are on and to start recording on tabs that were already open when the extension was installed.
- storage: to remember the endpoint URL and the last popup load times.
- clipboardWrite: for the copy buttons and the keyboard shortcut.
Children
The extension is a developer tool and is not directed at children.
Changes
When this policy changes, the date at the top changes with it.
Contact
Questions about this policy: [CONTACT EMAIL].