Browser extension privacyEffective September 26, 2026
Contents
Contact
Questions
Privacy questions about the extension can be sent to runleak@proton.me. The broader M9R privacy policy covers accounts and the website.
§ 1What this extension does
M9R Web Presence connects the pages you choose in your browser to the M9R app running on your own computer. The AI agents you run there (for example Claude Code, Codex or OpenCode) can then work on those pages together, in view: you see their cursors and short status messages, you can message them from a bar on the page, and anything consequential waits for your approval. The extension does not run an AI model, and it does nothing useful without the M9R app on your computer.
§ 2Information handled
For the browser tasks you start, the extension may handle page URLs and origins (to enforce the sites you allowed), page text returned by a read you asked for (including ordinary visible fields when explicitly targeted), the requested action, its target, its result and any text you ask an agent to type, agent names, presence and short messages shown on the page, and the messages you type or dictate in the message bar. Targeted reads or typing on hidden fields, password fields and fields marked for payment cards or one-time codes are refused. These are targeted safeguards, not a guarantee that other page text is free of sensitive information. Do not run an agent on a page unless you are comfortable sharing what it reads with that agent.
§ 3Microphone and speech
Holding Alt+M turns on your microphone, only for as long as you hold it. In the browser extension, speech is turned into text by Chrome's built-in speech recognition, which sends the audio to Google's speech service under Google's terms; M9R does not receive, record or keep the audio. The Windows desktop pill also supports Alt+M and uses the speech-recognition API provided by the installed WebView2 runtime; that runtime's speech provider may process audio under its own terms. M9R does not receive or store the audio. The level bars shown while you talk are computed on your computer and are not stored or sent anywhere. Recognised words stay in the message draft and are sent to agents only when you press Enter. The browser extension asks through Chrome's permission page; the desktop pill uses the Windows microphone permission flow and opens Windows microphone settings if access is denied. Local recognition is not enabled by the desktop path.
§ 5Storage and retention
The extension does not store page text, form values or browsing history. It keeps in Chrome's extension storage: a mapping of named tabs (cleared when Chrome restarts or the extension reloads), where you last placed the thread pill, whether the pill is open and which tab it shows, your motion preference, whether the all-sites question has been asked, which message previews you hid, and a short log of the last Alt+M and Alt+N key presses used for troubleshooting (no typed text; you can clear it from the extension's key-log page). Presence messages are held in memory for a few seconds. The M9R app and your agents may keep their own logs; see their settings and policies.
§ 6The M9R app and paid plans
The extension is free. Optional paid plans exist for features that run on M9R's servers (shared workspaces and history), and are bought on m9r.dev, never inside the extension.
§ 7Your controls
Site access is requested only when needed, for the site you choose. Chrome's grant covers the whole site; M9R also limits each approved grant by action, path and time. You can revoke a site in Chrome at any time, use Stop all browser actions in the extension, or remove the extension. Stopping cannot retract information already delivered to an agent or provider.
§ 8Permissions
tabs finds and manages M9R's tabs and checks the current site; scripting injects the extension's own packaged code into sites you allowed; alarms keeps the connection to the M9R app alive; storage keeps the settings above. Required host access is limited to your own computer; access to ordinary sites is optional and requested at runtime. The extension exposes two of its own pages (the thread pill and the message bar) and its provider badges to web pages so they can be shown in a frame on the page; the frames are isolated from the page, so a website cannot read what you type in them. It does not request cookies, history, debugger or download permissions, and it loads no remote code.
§ 9Names and marks
Claude, Codex, OpenCode and other agent names or marks shown belong to their owners. M9R is independent and is not affiliated with, endorsed by or sponsored by them; the names identify which agent is acting.
§ 10Changes
We will update this notice, with a new date, if the extension's data handling changes.
Policies