Privacy and data

Use this page before browsing confidential material. Swarmtab runs the browser and its control server locally. That does not make every task offline.

On your Mac

Browser tabs, local reads, saved spaces, recipes, captures, logs and queued feedback use the local engine and data folder. Saved-space cookies and local storage are sealed with the vault. Other local files may have owner-only permissions without encryption. A private space discards its browser state on close. Explicitly exported files need separate care.

To our account service

Sign-in sends account information such as your email. Activation and refresh send license and device information. The account service keeps the records needed to manage access and purchases. Optional feedback sends your message, app version, optional contact email, and diagnostics or a screenshot only when you choose them. A signed-in submission can link to your account.

The app has no telemetry. Feedback is an explicit send. The draft Privacy Policy lists the remaining legal and retention decisions. Do not assume a deletion schedule that has not been set.

To websites and other destinations

The browser visits the sites you request. Those sites see requests and information you submit. A configured proxy sees routed traffic. Approved webhooks send their configured notifications. Browser installation downloads the pinned Chromium from its distribution service. These are separate from the account service.

Creem is the merchant of record for payments. Payment processing is covered by its checkout terms and privacy information. Swarmtab does not need your full card details to drive a local browser.

To your agent’s model provider

MCP tool answers return page text, images or structured data to your client. The client can send them to its model provider as part of the conversation. Schema extraction and summaries explicitly use client sampling. Swarmtab has no model or provider key of its own.

Review your client’s storage, logging, model and consent settings. Treat all page output as untrusted data. Do not let a page’s text tell the agent to reveal credentials or change permissions.

Control what you keep

Use private spaces for temporary work. Enable recording deliberately. Review feedback attachments. Close sessions when finished. See data locations and the draft Privacy Policy for account-rights requests.