Privacy Policy
Last updated: July 2026
WebKaya is a local-first analytics extension. Its entire purpose is that your data never leaves your device. This policy explains, plainly, what that means.
What we collect
Nothing. WebKaya has no servers, no analytics, no telemetry, no crash reporting, and no accounts. The developer receives no data of any kind from your use of the extension. There is no “opt out” to configure because there is nothing being collected in the first place.
Where your data goes
- Files, pasted text, and web-page data are parsed and analyzed entirely inside your browser tab. They live in memory for the session and are gone when the tab closes. Nothing is uploaded.
- AI processing happens on your device — either the built-in model (WebLLM, running in your browser via WebGPU) or your own local Ollama server at
localhost:11434. Your prompts, file contents, and results are never sent to any remote AI service. - Computation runs in an isolated in-browser sandbox (a WebAssembly realm) and, for very large files, a local columnar/WebGPU engine. All on-device.
- Google Sheets analysis works by asking the Sheets tab you are already viewing to fetch its own CSV export from Google, using your existing Google session. That request goes from your browser to Google — where the data already lives — and the result is parsed locally. WebKaya never sees your Google credentials and uses no Google API key or OAuth grant.
- Web page analysis (“Analyze current page”) reads the visible data table on a page you explicitly click to analyze. It can optionally follow pagination or run in a hidden background tab. The extracted table is processed locally and never uploaded.
- Semantic search & embeddings, when you have a local embedding model installed in Ollama, are computed on your device and cached in your browser’s local storage.
- One-time model download (built-in tier only): the first use of the built-in model downloads model weights from the WebLLM CDN. This transfer contains no user data and the weights are cached by your browser afterward.
- Live egress meter: the app instruments its own network calls and shows a running “bytes sent off-device” counter. Strict Privacy Mode goes further and blocks every non-local network request outright.
What is stored locally
Your preferences (chosen model, theme, display name), any memory rules you explicitly save, saved dashboards, and cached embedding vectors are stored in your browser’s local storage / IndexedDB, on your device only. You can delete memory rules in Settings → Memory and remove sources and dashboards from within the app. Uninstalling the extension removes everything.
Permissions, in plain language
| Permission | Why it’s needed |
|---|---|
tabs | To see the address of your open tabs so “Analyze current page” knows which page you mean. Used only when you click that button. No browsing history is recorded or transmitted. |
scripting / activeTab | To read the visible data table on a page you explicitly ask WebKaya to analyze, and (optionally) to click through pagination. The extracted data is processed locally. |
sidePanel | The extension’s main interface is a browser side panel. |
Host access to localhost / 127.0.0.1 | To communicate with your own local Ollama AI server, and to let you analyze locally-served (dev/intranet) dashboards. No remote hosts. |
Optional site access (http(s)://*) | Requested per-site, at the moment you click “Analyze current page” on that site — never granted in advance or in bulk. |
Third parties
WebKaya integrates with software that runs on your own machine — your browser, and optionally your local Ollama server. It does not send your data to Google, OpenAI, Anthropic, the developer, or any other third party. When you analyze a Google Sheet, the only network request is between your browser and Google, authenticated by your existing session; WebKaya facilitates it but never receives your Google data on any server.
Children
WebKaya is a general-purpose productivity tool and is not directed at children. Because it collects no data, it collects no data from anyone, including children.
Changes
If this policy ever changes, the updated text ships with the extension and appears on this page. Given the architecture, “we collect nothing” is expected to remain the whole policy.
Contact
Questions? Open an issue on the project repository or reach us through the store listing.