Privacy Policy

Saccade reads supported page structure and visible state only in an authorized HTTP or HTTPS tab. This may include page text, control labels, roles, states, links, and changes needed to describe the page to your connected agent.

The semantic page view excludes editable values, supported protected field values, cookies, browser storage, DOM paths and selectors. Saccade does not give agents arbitrary-coordinate control.

With observation approval, experimental features can also send page screenshots, sampled video frames and loaded captions, and short 3D sequences with application-reported state from supported scene bridges. Page screenshots mask standard input fields and embedded frames, but ordinary text, images, custom controls and Canvas content can still contain personal or sensitive information. Only share content you want your connected agent to receive. Video sampling is not complete viewing and does not transcribe audio.

Existing browser tabs stay Agent Off until you share a specific tab from the Saccade extension. A connected agent may also ask Saccade to open a new tab for a known HTTP or HTTPS address. Saccade marks that tab as agent-owned and limits access to the matching local session.

You can stop sharing a user tab from the extension. Closing an agent-owned tab removes its authorization.

One observation approval covers tabs opened by or explicitly shared with that agent for its live MCP session, including new pages and refreshes. Other agents and unshared tabs are excluded. Stop sharing revokes a tab; screenshot and video Off controls block that access. Separately, an explicit owner-configured scene policy may authorize scene-only observation at exact project origins, not arbitrary tabs, page screenshots or videos.

The extension sends authorized observations through a loopback connection to the Node.js Broker on your computer. The MCP adapter supplies the requested observations to the agent you configured.

NaN Logic does not operate a Saccade cloud service that receives this page data. Your agent client or model provider may process data it receives from Saccade under that provider's privacy policy and your configuration. Review those terms before connecting an agent.

The extension stores a random browser instance identifier, tab authorization state, and tab ownership metadata needed to maintain Agent On and Agent Off boundaries. It does not keep a browsing-history archive or store page contents for NaN Logic.

The Broker keeps current semantic state and bounded changes in memory. Its recovery journal stores hashed session proofs, exact tab lease metadata and value-free command status, not page contents. Diagnostics contain bounded operational metadata, not screenshots, media recordings, cookies or editable values. The setup tool's uninstall command removes managed client configuration; its purge option also removes the dedicated local Saccade data directory. Browser and agent-client data remain subject to those products' settings and retention policies.

Video requests may temporarily load up to 64 MiB locally and seek or pause the authorized player. Media and frames are processed in memory, not persistently recorded by Saccade. Temporary decoder buffers are released after the task; retained sampling metadata expires within 60 seconds. Requests have bounded deadlines, and user interaction or loss of authorization stops sampling. Player restoration is conditional and failures are reported. A connected agent may retain observations according to its own settings.

NaN Logic does not sell Saccade page data, use it for targeted advertising, or use the extension to track browsing for advertising or credit purposes. The extension does not include advertising or analytics SDKs.

• Website access: reads supported structure in authorized HTTP and HTTPS tabs.
• Active tab: supports authorized visible-tab screenshots.
• Offscreen: allows a packaged extension document to decode temporary media and select frames.
• Tabs: identifies authorized tabs and manages tabs opened by Saccade.
• Storage: keeps local authorization and browser-instance metadata.
• Alarms: schedules local extension lifecycle work.

All executable JavaScript ships inside the extension package. Saccade does not download or execute remote code.

Saccade uses exact tab leases, session and document checks, and an authenticated local Broker connection to limit access. No software can eliminate every risk. Only share tabs that you want your connected agent to process, and keep your browser, agent client, and Saccade installation updated.

Send privacy questions or deletion requests to privacy@nanlogic.com. NaN Logic LLC is located at 8840 Mason Ave, Morton Grove, IL 60053, United States.

We may update this policy when Saccade changes. The date at the top identifies the current version. The general NaN Logic Privacy Policy also applies where relevant.