Effective: July 27, 2026
We take the protection of your personal data very seriously. The following privacy policy explains how we handle your data — and, more importantly, why this project does not collect any data in the first place in most cases.
Browser-AI is a client-side web application that runs language models (LLMs) directly in the user's browser. All AI inference takes place locally on your device via your browser's WebGPU interface. There is no proprietary server, no backend infrastructure, and no central data collection. This has far-reaching implications for data privacy, which are explained in detail below.
This privacy policy is designed to comply with both the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (revDSG, SR 235.1), which entered into force on September 1, 2023. Where references to specific articles are provided, they cite the GDPR article first, followed by the corresponding revDSG article in parentheses where applicable. If you are a user accessing the application from Switzerland, the revDSG applies to you; if you are accessing it from the EU/EEA, the GDPR applies. Users from other jurisdictions are subject to the laws of their respective countries.
Responsible for this instance:
Responsible controller:
Johannes Klein
Address:
Höhenweg 17
9000 St. Gallen
Switzerland
Contact:
Email: erfindungen@icloud.com
Browser-AI is a client-side web application that can be operated by different individuals or organizations. The data controller is always the operator of the specific instance you are using, not the authors of the Browser-AI software itself.
Browser-AI does not collect any personal data on its own. There are no user accounts, no registration processes, no cookies, and no tracking mechanisms. The application does not communicate with a proprietary server. All configuration settings, chat messages, and system prompts remain exclusively in your browser's working memory and are automatically deleted when you close the tab.
When you load an AI model, the corresponding .gguf file is downloaded from Hugging Face's servers (huggingface.co) into your browser. This download is subject to Hugging Face's Privacy Policy. Hugging Face may, for example, record your IP address and HTTP request metadata. We have no influence over this data processing and do not store this data ourselves. The transmission of your IP address to Hugging Face in the course of loading the required model files is based on our legitimate interest in providing a functional application pursuant to Art. 6(1)(f) GDPR / Art. 31(1) revDSG (overwhelming private or public interest). Hugging Face Inc. is a company based in the United States. The transfer of your data to the US is covered by the EU-US Data Privacy Framework, under which Hugging Face Inc. is certified (GDPR Art. 45). You can verify this certification at dataprivacyframework.gov. Under the revDSG, this transfer is additionally safeguarded by the Swiss-US Data Privacy Framework, under which Hugging Face Inc. is also certified, fulfilling the adequacy requirement of Art. 17 revDSG. The Swiss adequacy list is maintained by the Swiss Federal Department of Justice and Police (FDJP).
To display the available .gguf files of a repository, a request is sent to the public Hugging Face API (huggingface.co/api/models/...). This request is also processed by Hugging Face and is subject to their privacy policy. The transmission of your IP address in the course of this API request is based on our legitimate interest in providing the application's configuration functionality pursuant to Art. 6(1)(f) GDPR / Art. 31(1) revDSG. The same third-country transfer safeguards as described in section 3.2 apply (EU-US Data Privacy Framework for EU users; Swiss-US Data Privacy Framework for Swiss users, Art. 17 revDSG).
The application loads external JavaScript libraries and binary resources from the following content delivery networks. The transmission of your IP address when loading these resources is based on our legitimate interest in the technically optimized delivery of the application pursuant to Art. 6(1)(f) GDPR / Art. 31(1) revDSG.
@wllama/wllama@3.5.1) — the main runtime that loads AI models in the browser;wllama.wasm) — compiled WASM module that performs the actual LLM inference;These libraries are loaded directly from jsDelivr's CDN on every page load (builder mode) or every widget load (embed mode). Your browser transmits standard HTTP metadata (IP address, user agent, referrer, requested URL) to jsDelivr in the process. We have no influence over this transmission, do not receive this data, and cannot prevent it without breaking the functionality of the service.
Although the application itself does not set any cookies (see section 11), the third-party services mentioned above — in particular Hugging Face (when downloading model files or calling the public API) and jsDelivr (when loading JavaScript or WASM resources) — may set their own cookies on their respective domains. These are third-party cookies from the perspective of this application. We have no control over whether these services set cookies, what data they store, or how long the cookies persist. Such cookies are governed by the privacy policies of the respective services:
You can configure your browser to block all third-party cookies, or to delete cookies when the browser is closed. Most modern browsers offer this option in their privacy settings. Blocking third-party cookies does not impair the core functionality of this application (model loading and chat inference still work), but may affect the embedding website's functionality.
Downloaded models are cached in your browser (Cache API, IndexedDB, localStorage, sessionStorage) to avoid re-downloading them on subsequent visits. This data remains exclusively on your device and is bound to the application's origin (domain). You can clear this cache at any time through your browser settings. The application also offers an option to automatically clear the cache when a download error occurs. None of this stored data is transmitted to the operator or to any third party.
Since we do not operate any servers and do not collect any data, we do not share any data with third parties either. The only external communication partners are Hugging Face (for model downloads and API requests) and jsDelivr (for CDN resources). Communication with these services occurs directly between your browser and their servers.
All chat messages you type into the widget, as well as the AI responses generated in return, are processed exclusively in your browser. Inference runs locally on your device via the WebGPU interface. No chat message is sent to any server, stored by us, or analyzed in any way. As soon as you close the browser tab, all conversation data is irreversibly deleted.
The widget is configured via URL parameters (e.g., repository, model file, system prompt, temperature). These parameters are part of the URL and may be visible to the operator of the website where the widget is embedded (e.g., as an iframe source). When sharing a widget link, you should ensure that the URL does not contain sensitive information in the system prompt or other parameters.
When Browser-AI is embedded as a widget on a third-party website (e.g., via an iframe), the privacy policy of the embedding website's operator applies in addition. We have no influence over tracking technologies, cookies, or other data collection mechanisms used on the embedding website.
When the application is hosted on a web server (e.g., Cloudflare Pages, GitHub Pages, or a custom server), the hosting provider or server operator may create standard log files containing access times, IP addresses, user agents, and similar metadata. This data collection occurs on the basis of the hosting provider's legitimate interest pursuant to Art. 6(1)(f) GDPR / Art. 31(1) revDSG in ensuring the security and availability of their service. This processing is subject to the privacy policy of the respective hosting provider. We do not access these log files.
Under the GDPR and the Swiss revDSG, you have the following rights regarding your personal data. Since this application does not itself collect or store personal data, most of these rights are relevant only in relation to the third-party services mentioned above (Hugging Face, jsDelivr, hosting provider). The GDPR article is cited first, followed by the corresponding revDSG article:
To exercise these rights with respect to this application, please contact the data controller named in section 2 above.
We do not use encrypted data transmission to a proprietary server because no such server exists. Communication with Hugging Face and jsDelivr takes place over HTTPS. Model files stored in the browser cache are unencrypted on your device. If you process sensitive data on your device, you should ensure that access to your device is appropriately protected.
Browser-AI does not set any cookies itself — neither first-party cookies nor third-party cookies. The application does not use cookies for session management, authentication, personalization, analytics, or advertising. The application exclusively uses client-side storage technologies (Cache API, IndexedDB, localStorage, sessionStorage) for caching downloaded models and configuration state to enable faster reuse. These storage mechanisms are bound to the application's origin (domain) and can be managed and cleared at any time through your standard browser settings.
However, as explained in section 3.5, the third-party services that this application loads from (Hugging Face, jsDelivr) may set their own third-party cookies on their respective domains. We have no control over such cookies. To block them, configure your browser's privacy settings to reject third-party cookies.
Since this application itself does not set cookies and does not perform any tracking that would require user consent under the ePrivacy Directive (Directive 2002/58/EC, as amended) and the corresponding national implementations, no cookie consent banner is displayed. If the embedding website (when the widget is integrated via iframe) requires a cookie consent banner, that is the responsibility of the embedding website's operator.
For technical completeness: this application uses the WebGPU API (browser standard for GPU access) and WebAssembly (WASM) to run AI inference entirely on the user's device. Both technologies execute code locally in your browser's sandbox and do not, by themselves, transmit any data to the operator or to any third party. The only data transmitted to third parties is described in sections 3.2 through 3.4 above (model downloads from Hugging Face, library downloads from jsDelivr).
WebGPU and WASM code runs in your browser's security sandbox and cannot access files on your device beyond what the browser explicitly allows. The operator assumes no responsibility for security vulnerabilities in the underlying browser, GPU drivers, or third-party libraries; users should keep their browser and operating system up to date.
Embedding and using the Browser-AI widget on third-party websites is permitted until further notice, provided that the embedding does not violate applicable law. This permission is non-exclusive, non-transferable, and revocable at any time without prior notice and without stating reasons.
The widget and the entire Browser-AI service are provided "as is" and "as available", with all faults and without warranty of any kind, whether express, implied, statutory, or otherwise. This applies to all forms of use, including but not limited to embedding, linking, integration, and any interaction with the service or its output.
All usage, integration, and any results obtained from the service are provided entirely without liability. The operator assumes no responsibility or liability whatsoever for any direct, indirect, incidental, consequential, special, exemplary, or punitive damages arising from or related to the use, embedding, integration, or reliance on the widget or the service — whether based on contract, tort (including negligence), strict liability, or any other legal theory. This includes, without limitation, damages for loss of profits, loss of data, business interruption, or any other commercial losses or damages.
The user or embedding party bears the entire risk as to the quality, accuracy, performance, and results obtained from the use of the service. The user assumes all responsibility and risk for the use of the service and any decisions made based on its output. The user is solely responsible for ensuring that their use of the service complies with all applicable laws, regulations, and third-party rights.
We reserve the right to update this privacy policy to reflect changes in legal requirements or application functionality. The current version is always available on this page. The date of the last update is indicated at the top of this page.
If you have any questions about data privacy or this privacy policy, please contact the data controller named in section 2 above:
Johannes Klein
Höhenweg 17
9000 St. Gallen
Switzerland
Email: erfindungen@icloud.com
Swiss users have the additional option of contacting the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB): edoeb.admin.ch.