Privacy Policy for Moonsurf Browser Control

Last Updated: January 2026

Overview

Moonsurf Browser Control is a Chrome extension that enables AI assistants to automate browser interactions through the Model Context Protocol (MCP). This privacy policy explains how the extension handles your data.

Data Collection

What We Do NOT Collect

  • Personal information
  • Browsing history
  • Passwords or credentials
  • Form data
  • Cookies or session data

What the Extension Accesses

The extension accesses browser data only when explicitly requested by an AI assistant through the MCP protocol:

  1. Tab Information: Tab URLs, titles, and states are accessed to enable navigation and tab management features.
  2. Page Content: DOM content and screenshots are captured only when requested by an AI assistant for automation tasks.
  3. Network Data: Cookies and headers may be accessed or modified when requested for automation purposes.
  4. Local Storage: Browser storage may be accessed or modified when explicitly requested.

Data Transmission

  • All communication occurs between the extension and a locally running MCP server (default: localhost:3300)
  • No data is transmitted to external servers owned by Moonsurf
  • Data exchange with AI assistants happens through the user's own MCP server setup

Data Storage

  • The extension stores only connection state and configuration settings in Chrome's local storage
  • No browsing data, page content, or personal information is persisted

Third-Party Access

  • The extension communicates only with a local MCP server that you control
  • AI assistants receive data only through your configured MCP setup
  • No third-party analytics, tracking, or advertising services are used

User Control

You have full control over:

  • When the extension is active (enable/disable via Chrome)
  • Which sites the extension can interact with (through security settings)
  • What permission level AI assistants have (readonly, interact, or full)

Security

  • The extension uses Chrome's built-in debugger API for browser automation
  • Permission levels control what operations AI assistants can perform
  • Domain allowlists can restrict which websites can be automated

Contact

For questions about this privacy policy, please visit moonsurf.ai or open an issue on our GitHub repository.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the "Last Updated" date above.