Coati

Privacy policy

Last updated 10 November 2026.

This policy covers the Coati browser extension and its local program, coati-broker, which runs on your computer. Coati has no server of its own. We do not receive any of the data described below, so we cannot sell or share it.

What the extension handles

Coati acts only when you ask a question. Nothing runs in the background. For each question, the following goes to the model you configured:

  • your question;
  • the page text or HTML, only when the model asks for it to answer you. Every answer says whether the page was read;
  • the last 10 exchanges of the conversation;
  • any image you attach.

Coati never reads the value of a password field, at any reading level. Before the page's HTML (dev mode) goes to an online model, Coati warns you if it finds API keys, card numbers or IBANs. It never masks anything.

Where it goes

  • With a local model (Ollama, LM Studio), the data stays on your computer.
  • With an online provider (for example Anthropic, OpenAI, Mistral, OpenRouter or DeepSeek), the local program sends it from your computer to that provider, using your own key. Each key is sent only to its own provider.
  • When the model searches the web, the queries go to your browser's default search engine, and the result pages the model opens are fetched by your browser and read like the current page.

What is stored, and where

  • API keys: in the local program's configuration, on your computer. The extension never holds them. The configuration and key files are restricted to your user account (and the computer's administrators).
  • Pairing key, which lets the extension prove itself to the local program: in the browser's session storage (chrome.storage.session) only.
  • Conversation: in the browser's local storage, unencrypted, for 30 days by default. You can change this in the settings, or clear the conversation. No key or other secret is stored there.

Uninstalling the local program removes the program. Its configuration and keys stay on your computer unless you uninstall with --purge (see the install guide).

What Coati does not do

  • No telemetry, no analytics, no server of ours.
  • The extension's pages may only connect to the local program on your computer.
  • On a page, Coati only reads and highlights. It never clicks, types, pays, sends, deletes, publishes or signs in.

Third parties

The model provider you choose and your search engine receive what is described above, under their own privacy policies. Free online models may keep what you send them: check the provider's privacy settings before sending anything confidential.

Source code

Coati is open source under AGPL-3.0. Everything on this page can be checked in the source code and in its security notes.

Contact

Questions about this policy: [email protected]. To report a vulnerability, use GitHub's private reporting, not a public issue.