Druve Browser Control — Privacy Policy

Last updated: August 2026

Plain-language summary. This extension collects nothing, stores nothing, and sends nothing to Druve or anywhere else. It only relays commands (go to this page, click this, type this, read this) between an agent session you started and one browser tab it opens for that session — and it does nothing at all when no session is active.

1. What this extension is

Druve Browser Control lets an AI agent you are running (from druve.ai or the local Druve CLI) drive one tab in your own real, already-logged-in browser instead of an isolated, logged-out one. See the setup guide for how it works.

2. What data it collects

None.The extension has no analytics, no telemetry, and no server of its own to send anything to. It does not read, log, or transmit your browsing history, page content, cookies, passwords, or anything else outside of the one tab it opens for an active agent session — and even then, only the specific page text or values an agent explicitly asks for (via read/type/click commands) ever leaves that tab, and only back to the same session that started it, never to Druve’s servers or any third party.

3. Where commands come from

The extension only acts on commands from one of two places, both under your control:

A page on druve.ai (or a local localhostdev server) that you have open and are actively using — via Chrome’s standard externally_connectable messaging, which only that specific origin can use.
The Druve CLI running on your own machine, over a connection that only accepts traffic from 127.0.0.1 (your own computer) — never reachable from the network or any other device.

4. Why it asks for the permissions it does

Every permission this extension requests is used directly for the one thing it does — open and drive a tab for an active agent session. None of them are used for tracking, analytics, or anything outside that. The full breakdown is public in the extension’s source (see manifest.json in the download).

5. The allowlist

Every agent declares, up front, the exact list of websites (“Browser targets”) it’s allowed to visit — reviewed and published on that agent’s listing, the same as the CLI’s isolated browser enforces. This extension enforces that identical list at the network level for the one tab it opens: it physically cannot navigate that tab anywhere outside it, regardless of what the agent’s code tries to do.

6. Data retention

There is nothing to retain. The extension keeps an in-memory record of the current tab’s session only while that session is open, and discards it the moment the session closes (agent finishes, tab closes, or the browser restarts). Nothing persists to disk by the extension itself.

7. Contact

Questions about this extension specifically, or the main Druve privacy policy that covers the rest of the site: pkim26162@gmail.com.