Tabhelm privacy policy

Last updated: 2026-10-02

Tabhelm is an unofficial browser extension and local helper that lets an AI agent you choose (Cursor's agent, or the extension's own side-panel chat) see and control your browser. It is not affiliated with or endorsed by Anysphere (Cursor), Anthropic, Google or OpenAI.

What Tabhelm does not do

• It has no servers and no analytics. The developers receive no data from you: no page content, no browsing history, no keys, no usage statistics.
• It does not sell or share data, and it does not load remote code.

What it accesses and why

When an agent uses the browser, Tabhelm reads and acts on the pages in its own tab group only (page text and structure, screenshots, console and network activity of those tabs, and input events it sends). This is the product's single purpose. It does this only after you open its side panel on a tab or when your agent calls it, and you can stop it at any time with the Stop button.

Where that data goes

• Cursor's agent (MCP): results of tool calls (for example a screenshot or page text) are returned over a local connection (browser → native helper → MCP server on your computer) to Cursor, which processes them under Cursor's own terms and privacy policy.
• Side-panel chat with the Cursor CLI provider: your prompt and tool results are handled by the cursor-agent program on your computer, under Cursor's terms.
• Side-panel chat with an API-key provider (Anthropic or an OpenAI-compatible endpoint you configure): your prompt and the tool results are sent from your browser directly to that provider using the key you supplied, under that provider's terms.

Tabhelm never sends data anywhere else.

What is stored on your computer

• Your settings, site permissions (allow/block lists), saved shortcuts, scheduled tasks and, if you choose an API-key provider, your API key are stored in chrome.storage.local in your browser profile. Session approvals are kept in chrome.storage.session and cleared when the browser closes.
• The local helper keeps small files in ~/.tabhelm (Windows: %USERPROFILE%\.tabhelm): a launcher, a config file, and per-connection descriptors, readable only by your user account.
• Removing the extension deletes the browser-side data; npx tabhelm-mcp uninstall removes the local helper files.

Safety controls you have

Per-site permissions (allow once, always, block), an "Ask before acting" mode, a visible indicator on controlled tabs, and a Stop button. Tabhelm refuses to type into password and payment fields and will not proceed past CAPTCHAs.

Children

Tabhelm is not directed at children.

Changes and contact

Changes to this policy are published on this page with a new date. Questions or requests: jyotirajsingh3@gmail.com.