Privacy Policy
Last updated 2026-08-11 · OrbitCosmo, a browser extension
OrbitCosmo builds a private, local map of the pages you read, so you can find them again later. This page explains what OrbitCosmo stores, what it never collects, and the one optional feature that sends anything off your device.
What stays on your device
The pages you visit, their titles and descriptions, the connections between them, and the local embeddings used to find them again are stored only in your browser's on-device storage (IndexedDB), scoped to the OrbitCosmo extension. None of it is uploaded, synced to your Google account, or sent to OrbitCosmo or anyone else.
Removing the extension deletes all of it. There is no server-side copy to ask us to delete, because none exists.
What OrbitCosmo never does
- No accounts, sign-ups, or logins.
- No analytics, telemetry, or usage tracking of any kind.
- No advertising, and your data is never sold or shared with advertisers.
- No background network requests while you browse — capture, search, and the graph run entirely on your machine.
The one optional feature that leaves your device
OrbitCosmo's wiki feature — off until you turn it on in settings — asks Claude (Anthropic) to write summaries of your browsing sessions and answer questions about them. When it's on, and only then, OrbitCosmo sends:
- On a wiki update: for each page in the browsing session being written up — its URL, title, description, keywords, and stored text excerpt (the first 2,500 characters, the same snippet OrbitCosmo already keeps locally) — plus the session's label.
- Also on an update: your wiki's index (the titles of your wiki pages) and excerpts of up to five existing wiki pages on related topics, so updates land on existing pages instead of duplicating them.
- On a question: your question, excerpts of your own wiki pages needed to answer it — including the page URLs those wiki pages cite — and the stored facts shown in the detail sheet.
URLs are browsing history, which is why they're named first here. Nothing is sent while the wiki is off, and it is off by default. You choose where this goes: your own Anthropic API key (straight to Anthropic), or OrbitCosmo's capped beta proxy (a Cloudflare Worker that forwards to Anthropic and stores nothing about your requests).
Permissions OrbitCosmo requests
| Permission | Why |
|---|---|
| Read page content on sites you visit | This is the product: OrbitCosmo reads the pages you're already looking at to build your graph. It never fetches pages you haven't opened. |
| Tabs | To see the active tab's URL and title, and to draw a line when you navigate from one page to another. |
| Storage | To save your graph and preferences on-device. |
| Side panel | To show OrbitCosmo's interface in Chrome's side panel. |
| Alarms | To run routine on-device maintenance (like finishing an interrupted embedding pass) on a schedule. |
Changes to this policy
If what OrbitCosmo stores or sends ever changes, this page changes in the same update — never after the fact.
Contact
Questions or concerns: isabella@orbitcosmo.com.