Blog ·
What Weightless AI sees, and what it doesn’t
Your pages, your keys, your accounts: what the extension can read, when, and what technically prevents it from sending anything anywhere except the AI engine you chose.
An extension installed in your browser is well placed to see everything. That is exactly why you should know precisely what it does. Here, point by point, is what Weightless AI sees, and what it doesn’t.
Your pages: only when you ask
Weightless AI installs no permanent script on the websites you visit. It only reads a page when you ask it to: Alt + W from that page, a right-click on a selection, “Summarise the page”. And only what you pointed it to: the field you are typing in, the selected passage, the open page.
The rest of the time, the extension sees nothing of your browsing.
A closed list, enforced by Chrome
Weightless AIThis is the strongest protection, because it doesn’t rely on a promise. Every Chrome extension declares a security policy: the list of addresses it is allowed to contact. Weightless AI’s list contains only the AI engines (Google Gemini, OpenAI, Anthropic, Mistral, Groq, OpenRouter), Google Drive for optional sync, and your own computer for local AI.
Any other address is blocked by Chrome itself: the assistant window and the core of the extension cannot open a connection anywhere else, even by mistake. As for the small scripts the extension places in a page when you ask for a rewrite, they only read and write the text of the chosen field: they send nothing.
Your keys and conversations
- They stay on your computer, in Chrome’s storage.
- An API key only goes to its own provider: never into a log, never into an export.
- Sync is optional. It uses your own Google Drive, in a private folder reserved for the extension, which has access to none of your other files.
Your accounts: no access
Weightless AI asks for no access to your email, your calendar or your contacts. Actions simply open your service’s page with the details already filled in: nothing is saved until you click yourself.
Checked before every release
For version 3.22, the code was put through its paces, one attack scenario at a time: booby-trapped web page, booby-trapped text, manipulated AI answer. Result: no critical, high or medium vulnerability, and four minor points fixed before release. The extension runs no code from the internet and uses no third-party library.
The code, free to read
Everything above can be checked. The code of every version is available on the source code page: readable, commented, with no third-party library, identical to the package published on the Chrome Web Store. You can read it, analyse it and load it into Chrome for verification. Only copying and republishing it are forbidden.
A question about your data? Write to us at contact@weightless-ai.fr, or read the privacy policy.