Privacy Policy

Last updated: 2025-04-01

The short version

Anya is a browser extension plus a local Node "bridge" that runs on your machine. It does not have a server. There is no Anya backend, no telemetry, no analytics, no crash reporter, no remote config. Every byte the extension produces stays on your device, with two exceptions you opt into by using the product:

Your prompts and the page context you attach are sent to GitHub Copilot's API via the official @github/copilot-sdk, under your existing GitHub Copilot subscription.
If you ask Anya to fetch or open a URL, your browser fetches that URL — same as if you'd typed it in.

What Anya stores locally

Where	What
`chrome.storage.local`	Chats, settings, pinned tabs.
`%LOCALAPPDATA%\Anya\` (Windows) `~/Library/Application Support/Anya/` (macOS) `~/.local/share/Anya/` (Linux)	Bridge state: per-chat working dir, Playwright binding, log file.

Both locations are on your machine. Uninstalling the extension removes chrome.storage.local; running the uninstall script removes the bridge data dir.

Data Anya can read (and why)

Active tab content / DOM — only when you ask. Used to summarise pages, extract selections, drive forms via Playwright.
Open tabs (titles + URLs) — only when you reference them (e.g. @tabs or "diff what I have open"). The list never leaves your machine unless you submit it as part of a prompt.
Bookmarks — only when you reference a workflow ("open the order release page") or ask Anya to reorganise. Anya never modifies bookmarks without your explicit confirmation.
Downloads list — only when you ask Anya to inspect downloads (for example "show recent downloads" or "find that installer").
Clipboard — read only when you type @clipboard in a prompt.
Local files — only when you point Anya at a project folder. The bridge spawns the same SDK toolbelt the terminal Copilot uses (read/edit/grep/shell). Files are never sent anywhere except as context to Copilot's API in turns where you reference them.

Data sent to GitHub Copilot

Your messages and any context you attach (page text, selections, tab listings, file contents you reference, screenshots) are sent to GitHub Copilot's API through the official @github/copilot-sdk. Copilot's handling of that data is governed by GitHub's Copilot privacy terms, not by this document.

Authentication is your existing GitHub Copilot OAuth flow — Anya never sees your password and stores no GitHub tokens of its own beyond what the SDK keeps.

What Anya does not do

No analytics, telemetry, crash reporting, or A/B testing.
No remote config — the agent's behavior is fully determined by the code you can read on GitHub.
No cloud sync of chats, bookmarks, or settings.
No background reading of pages you haven't interacted with.
No selling, sharing, or transferring your data — there is no Anya company. The author is one engineer; the project is open source under the repo's license.

Permissions in plain English

Permission	Why
`nativeMessaging`	Talk to the local Node bridge. The whole product depends on it.
`sidePanel`	Render the Anya sidebar.
`tabs` + `activeTab`	List tabs, get the active tab URL/title, focus tabs you ask for.
`scripting`	Inject the Readability extractor on demand and run Playwright commands against a tab you bind.
`storage`	Persist your chats and preferences locally.
`bookmarks`	Search and (with confirmation) reorganise your bookmarks.
`downloads`	Search recent downloads when you explicitly ask.
`clipboardRead`	Read the clipboard only when you type `@clipboard`.
`<all_urls>`	Required to read or drive a tab on any site you ask Anya to work with.

Children

Anya is a developer tool; it is not directed at children under 13.

Changes

This policy may change as the product evolves. Material changes will be reflected in the "Last updated" date above and called out in the GitHub release notes.

Contact

Open an issue on github.com/aasis21/Anya.