Privacy policy
TokenHero reads a page only when you ask it to.
TokenHero turns the page you are on into the smallest useful description for an AI agent — its text, structure, links, image sizes, or a cropped screenshot — so the agent spends fewer tokens looking at it.
All of that work happens inside your browser. There is no TokenHero server, no account, and nothing to sign in to. The extension never sends the pages you visit, or anything extracted from them, to us or to anyone else.
What it reads
- the content of the page in the active tab — its text, headings, links, image addresses and sizes, and computed styles
- a screenshot of that tab, when you ask for one
- only on the tab you are on, and only when you click a button in the popup or an agent calls it through the bridge you switched on
What it does not do
- no analytics, telemetry, or crash reporting
- no remotely loaded code
- no browsing history, bookmarks, cookies, or password access
- no data sold, shared, or transmitted to us — we receive nothing
- no background reading: it does nothing on its own
The agent bridge is off until you turn it on
TokenHero can expose a function called window.__tokenhero on a tab so an AI agent working in your browser can read that page cheaply instead of taking expensive screenshots. This is off by default. It only turns on when you flip the "Agent access" switch in the popup yourself.
You should know what that switch means: once it is on for a tab, any script running on that page can call the function — including scripts the site itself loaded. For that reason the bridge accepts a fixed, deliberately small set of requests: read the page, capture it, download its images, check its links. It cannot be used to write files of the caller's choosing.
The second switch, "Keep it on for every page until I turn it off", decides whether that access follows you as you browse or ends when the tab navigates. Turning the main switch off stops TokenHero attaching to any further page.
The one time it uses the network
The "Check links" feature asks your browser to request each link on the current page, so it can tell you which ones are dead. Those requests go directly from your browser to those sites, exactly as if you had clicked the links. They do not pass through us. Nothing else in TokenHero makes a network request, and requests to private or local addresses are refused.
What is stored, and where
- your preferences — theme, screenshot settings, whether agent access should persist — in your browser's local extension storage
- a page fingerprint, when you use "mark", so a later call can tell whether the page changed; this lives in session storage and disappears when you close the browser
- nothing leaves your device
Images you download
- "Download all images" saves files to your own Downloads folder through Chrome's normal download mechanism
- the files go from the website to your disk; TokenHero does not copy them anywhere else
- the agent that asked is told only how many files were saved
Why it asks for the permissions it does
- Access to the sites you visit — to read the page you are looking at when you ask it to. Chrome requires this broad form specifically because taking a screenshot of the visible tab is not possible with a narrower one.
- Debugger — Chrome's own screenshot API can only photograph the tab that is in front. TokenHero uses the debugger interface to capture a background tab, a full page in one piece, or a device-sized view. While it does, Chrome shows a yellow bar telling you so. TokenHero is not a debugger and does not inspect your browsing.
- Downloads — to save images to your Downloads folder when you ask.
- Storage — to remember your settings.
Contact
Email: onder@ondermutluer.com
Website: www.ondermutluer.com
Last updated: 8 August 2026