Native coding agents on real websites. Safari setup and privacy.
Effective date: September 29, 2026
AgentOnWeb is an open-source browser extension for Chrome, Firefox, and Safari that displays local workspaces over the website you are using. Version 0.2.0 supports DeepSeek Harness and a separate local terminal host. This policy covers the browser extensions, the Safari macOS containing app, the DSH integration and the local terminal host.
AgentOnWeb stores display preferences and randomly generated connection credentials in local browser extension storage. Each credential lets your browser reconnect to a local runtime you have approved. The companion DSH plugin stores connection credential hashes and a native workspace navigation bookmark on your computer.
The extension uses tab identifiers and website origins to manage its overlay and the local connection. For Chrome and Safari, a temporary request-header rule is restricted to the relevant tab and the exact local workspace surface. Native top-level management pages retain their own cookies. This rule carries the local session credential and is removed when the tab closes, the surface changes, or the connection is revoked. Website scripts do not receive this credential.
The local terminal host runs shells under your OS user account. Terminal input/output and a bounded screen/scrollback snapshot are kept in memory for connected viewers. AgentOnWeb does not persist terminal transcripts; your shell and commands may save history, files or logs themselves. The host stores browser-grant hashes, a private setup endpoint and service diagnostics under ~/.agentonweb/terminal/. Its macOS LaunchAgent stores startup paths, PATH and shell selection under ~/Library/LaunchAgents/. The terminal view remembers its selected shell in browser session storage. A separate administrator cookie authorizes pairing management and is not delegated to embedded viewers.
When enabled, the Codex and Claude Code integrations report session IDs, terminal IDs, lifecycle status, a short user-prompt excerpt (up to 160 characters), the working directory, and approval status/details to the local terminal host. The host keeps a bounded in-memory session list and sends it only to authenticated extension connections. The extension renders session titles and notifications in its page overlay, including when the terminal panel is hidden. Treat that display as visible page content when screen sharing. AgentOnWeb does not forward tool output or assistant responses into these notifications. Session activity is not persisted as a transcript and is cleared when its terminal closes or the host restarts.
The shell installer installs the terminal package under ~/.local and adds its command directory to your shell profile. aow setup detects codex, claude and pi executables on PATH and asks which integrations to install (or accepts an explicit --agents selection). It installs a login service and a Chrome native messaging registration. For detected and selected CLIs, it backs up/updates Codex hooks and notify configuration in CODEX_HOME (normally ~/.codex) and Claude Code hooks in CLAUDE_CONFIG_DIR/settings.json (normally ~/.claude/settings.json), or installs a Pi extension under PI_CODING_AGENT_DIR (normally ~/.pi/agent/extensions/agentonweb.ts). Missing or unselected CLI integrations are left untouched. An existing notify command remains responsible for its own data processing. Native pairing uses local secrets and a saved receipt to avoid automatically reauthorizing revoked access. Files under ~/.agentonweb/terminal/ include native launcher/configuration and pairing receipts. Setup does not select a model, sign in to a CLI, change approval policy or trust hooks for you.
AgentOnWeb does not operate an analytics service, advertising service, or developer-hosted data backend. The extension and containing app do not send your browsing history, website contents, prompts, or connection credentials to the AgentOnWeb developer. AgentOnWeb does not sell personal information or track users across apps and websites for advertising.
In the DSH workspace, anything you type, attach or authorize is handled by DSH and the model providers or plugins you configure. In Local terminal, commands run on your computer with your user permissions. Those commands may read files, use the system clipboard or send data to their configured services; terminal text is delivered locally between the host and browser. Those services may process information outside your computer under their own policies. AgentOnWeb does not promise that your AI conversations remain offline. The extension itself does not automatically scrape or transmit the underlying webpage to a model.
Website access allows AgentOnWeb to display its controls and workspace on the websites you permit in your browser. Storage keeps your preferences and local connection. Tab access coordinates the workspace across tabs. Cookie permissions support authenticated access to the local runtime; Chrome and Safari additionally use temporary request-header rules. Chrome native messaging connects the extension to the installed local helper for initial pairing; the helper permits only explicitly registered extension origins. Alarms allow the extension to check and restore the local connection. These permissions are not used for advertising or analytics.
You can limit website access or disable the extension in your browser’s extension settings. Revoke a DSH browser in DSH Settings → AgentOnWeb. For Local terminal, run aow service open and revoke it in the private setup page. Revocation removes access but does not stop running shell commands. aow service uninstall stops the host’s live terminals and removes automatic startup; saved browser grants and CLI history remain. Uninstalling the extension removes it from the browser; local DSH data remains managed by DSH. You can delete the AgentOnWeb plugin’s local configuration in ~/.config/agentonweb/deepseek-harness/ after revoking connections and stopping DSH. After stopping the terminal host, you can delete ~/.agentonweb/terminal/ to remove its saved connection grants and diagnostics.
Run aow uninstall before removing the npm package to remove AgentOnWeb hooks, restore the prior notify command, remove native registration and stop/remove the service. This ends live shells. Backups, user configuration/history, browser grants and pairing receipts remain until you choose to delete them. aow codex-hooks uninstall removes only the Codex integration; aow claude-hooks uninstall removes only the Claude Code integration. AOW_SKIP_SETUP=1 skips automatic configuration during global package installation.
If you voluntarily submit a support issue, GitHub processes the information you include. Issues are public: do not include passwords, API keys, private code, or personal information. This documentation is hosted by GitHub Pages, whose infrastructure may process technical access information under GitHub’s privacy statement.
For privacy questions, open an issue without sensitive details. Material changes to this policy will be published here with an updated effective date.