LLMnesia

Privacy Policy

Last updated: 16 August 2026

Overview

LLMnesia is a browser extension and optional local desktop MCP integration that indexes your AI conversations locally on your device. It is built with a local-first, privacy-by-design architecture.

Your AI conversation content, conversation titles, conversation URLs, prompts, responses, search queries, extension settings, and searchable index are stored locally on your device using the Chrome Storage API (chrome.storage.local), unless you choose to opt in to Vault, an optional encrypted backup and sync feature described below. If you enable the desktop MCP integration, LLMnesia also stores a local copy of that corpus in your user profile so desktop AI apps can search it.

LLMnesia uses limited product analytics through PostHog to understand feature usage, diagnose problems, and improve the extension. LLMnesia does not send AI conversation content, conversation titles, conversation URLs, prompts, responses, search queries, cookies, authentication tokens, or local index data to PostHog or any other external analytics service.

Information processed locally by the extension

LLMnesia processes the following data locally on your device to provide its core search functionality:

  • Conversation metadata such as titles, URLs, and timestamps from supported AI chat platforms, used to build your searchable conversation index.
  • Conversation content such as text from your AI conversations on supported platforms, indexed locally to enable full-text search.
  • Search queries entered into LLMnesia, used locally to search your on-device index.
  • Extension settings such as your preferences and configuration, stored locally in your browser.

This data is processed and stored on your device using the Chrome Storage API (chrome.storage.local). It is not transmitted to LLMnesia servers, PostHog, or other third parties, unless you opt in to Vault, described below.

Desktop MCP and local browser bridge

If you choose to connect LLMnesia to a supported desktop AI app, LLMnesia creates a second local conversation corpus in your operating-system user profile (by default under ~/.llmnesia/corpus). The browser extension sends conversation records to a native messaging helper running on the same computer, and the local MCP server reads and writes that corpus when the desktop AI app uses a LLMnesia tool.

The native messaging helper and MCP server do not upload conversation content, titles, URLs, prompts, responses, MCP search queries, cookies, authentication tokens, or local index data to LLMnesia, PostHog, or other third parties. The MCP server makes no analytics or advertising requests.

Desktop MCP and automatic browser sync are optional. Chrome asks you to approve native messaging access when you click Enable automatic sync in LLMnesia Settings. The local helper setup also configures the supported desktop AI apps you choose to use.

Product analytics

LLMnesia uses PostHog to collect limited product analytics from the browser extension. This helps us understand which features are used, diagnose errors, improve reliability, and make better product decisions.

Analytics events may include limited technical and usage information such as:

  • Extension version
  • Browser type and operating system
  • Supported AI platform name, such as ChatGPT, Claude, Gemini, or Perplexity
  • Feature interactions, such as opening the extension, starting indexing, completing indexing, or using a settings control
  • Error categories or failure states
  • Aggregate counts, such as the number of conversations indexed
  • An anonymous extension install identifier used to understand product usage without requiring an account

LLMnesia does not send any of the following to PostHog or any other external analytics service:

  • AI conversation content
  • Conversation titles
  • Conversation URLs
  • Prompts or responses
  • Search queries
  • Conversation snippets or page text
  • Cookies or authentication tokens
  • Your local search index
  • Your name, email address, or AI platform account details

PostHog analytics are used only to operate, debug, and improve LLMnesia. They are not sold, used for advertising, transferred to data brokers, or used to determine creditworthiness or for lending purposes.

How your data is stored

All AI conversation data created or processed by LLMnesia, including your conversation index, conversation metadata, search data, and extension settings, is stored locally in your browser using the Chrome Storage API (chrome.storage.local). If you enable desktop MCP, a second local corpus is stored in your operating-system user profile so desktop AI apps can access it.

You can view, export, or delete your locally stored LLMnesia data at any time through the extension's settings.

Data handling

When you visit a supported AI chat platform, LLMnesia reads conversation titles and content from the page and saves them to a local index on your device. When you search, the extension queries this local index and displays results in your browser.

AI conversation content, conversation titles, conversation URLs, prompts, responses, search queries, extension settings, and local index data are not sent to LLMnesia servers, PostHog, or other third parties, unless you opt in to Vault, described below.

Limited product analytics are sent to PostHog as described in the Product analytics section above.

If desktop MCP is enabled, searches and tool calls run against the local filesystem corpus. They do not send the query or result to LLMnesia servers or analytics services.

Vault (optional encrypted backup and sync)

Vault is an optional feature, currently in early access and not enabled by default, that lets you back up your conversation index and access it across your own devices. It is off unless you deliberately set it up with a passphrase.

If you turn Vault on, your conversation content is encrypted on your device (AES-256-GCM, with a key derived from a passphrase only you know) before it ever leaves your device. The encrypted data is then synced to LLMnesia's sync backend, hosted on Supabase, so it can be restored to your other devices.

LLMnesia's servers store only this encrypted data. We do not have access to your passphrase or your encryption key, and cannot read, and have no practical way to decrypt, your conversation content stored in Vault.

Because the browser extension is built to support Vault for every installation, the extension requests permission to communicate with its Supabase sync backend (https://tkgvwpaxycliwqsrufxe.supabase.co) regardless of whether you have Vault turned on. This permission is not used, and no data is sent to that backend, unless you opt in to Vault.

You can sign out of Vault at any time from the extension's settings, which removes the Vault key from that device. To have your encrypted backup deleted from LLMnesia's servers entirely, contact us at hello@llmnesia.com.

Browser permissions

LLMnesia requests the following browser permissions, each used solely to provide core functionality:

  • Storage saves your conversation index and extension settings locally in your browser.
  • Tabs opens the correct conversation when you click a search result.
  • Active Tab detects which supported AI platform you are currently visiting.
  • Scripting injects the search overlay and indexing scripts into supported AI chat pages.
  • Native messaging, requested only when you enable automatic sync, connects the extension to LLMnesia's local helper on the same computer so desktop AI apps can use the local corpus.

Host permissions

LLMnesia requests host permissions for supported AI platforms:

  • ChatGPT (chatgpt.com, chat.openai.com)
  • Claude (claude.ai)
  • Gemini (gemini.google.com)
  • Perplexity (perplexity.ai)
  • Microsoft Copilot (copilot.microsoft.com)
  • DeepSeek (deepseek.com, chat.deepseek.com)
  • Grok (grok.com)
  • Mistral (chat.mistral.ai, mistral.ai)
  • Kimi (kimi.com)
  • Qwen (qwen.ai, chat.qwen.ai)
  • Google AI Studio (aistudio.google.com)
  • Character.AI (character.ai)
  • Z.ai (chat.z.ai)

These permissions are used to index supported AI conversation content locally on your device and to provide LLMnesia's search functionality. LLMnesia does not use these permissions to transmit AI conversation content, search queries, cookies, authentication tokens, or local index data to external servers.

LLMnesia also requests a host permission for its own sync backend, hosted on Supabase (tkgvwpaxycliwqsrufxe.supabase.co), used only by Vault, the optional encrypted backup and sync feature described above.

Third-party services

LLMnesia uses PostHog for limited product analytics as described above. PostHog may receive limited technical and product usage events, but it does not receive AI conversation content, conversation titles, conversation URLs, prompts, responses, search queries, cookies, authentication tokens, or local index data.

LLMnesia uses Supabase to host the Vault sync backend described above. If you opt in to Vault, your encrypted conversation data is stored on Supabase's infrastructure. Supabase does not have access to the encryption key needed to read that data.

The optional desktop MCP server and native messaging helper run locally and do not send conversation content or MCP queries to a third-party service.

LLMnesia does not use third-party advertising networks, data brokers, or information resellers.

Data sharing

We do not sell user data. We do not share user data with advertisers, data brokers, or information resellers.

Limited product analytics are processed by PostHog only to help us operate, debug, and improve LLMnesia. AI conversation content and local index data are not shared with PostHog or any other third party.

Chrome Web Store Limited Use disclosure

LLMnesia's use of information received from Chrome APIs and supported AI chat pages is limited to providing and improving its single purpose: local indexing and search of the user's AI conversations, including the optional Vault backup and sync feature described above.

LLMnesia does not sell user data, does not use user data for advertising, does not transfer user data to data brokers or information resellers, and does not use user data to determine creditworthiness or for lending purposes.

Human access to AI conversation content is not possible through LLMnesia because AI conversation content and the searchable index are stored locally on the user's device and are not transmitted to LLMnesia servers, PostHog, or other third parties. If you opt in to Vault, your conversation content is encrypted on your device before it is stored on LLMnesia's servers, so it remains unreadable to LLMnesia there as well.

Data security

AI conversation content, conversation metadata, search queries, extension settings, and local index data are stored locally on your device. This data is protected by your device's own security measures and your browser's extension storage protections.

Because AI conversation content and local index data are not transmitted to external servers, LLMnesia reduces the risk of server-side breaches involving that content. Data you back up via Vault is encrypted on your device before it is sent, so it remains protected even in that scenario.

Data retention and deletion

AI conversation content, conversation metadata, search queries, extension settings, and local index data are stored locally on your device for as long as the extension is installed, unless you delete them earlier.

If you enable desktop MCP, its filesystem corpus remains on the device until you delete it. Uninstalling the local helper deliberately leaves that corpus intact so removing an integration cannot accidentally destroy your history.

You can delete your locally stored LLMnesia data at any time by:

  • Using the export/delete controls within the extension's settings
  • Uninstalling the extension, which removes the extension's local storage
  • Clearing your browser's extension storage

To remove the desktop MCP copy as well, run the LLMnesia MCP uninstall command and delete the corpus path it prints (normally ~/.llmnesia/corpus).

If you opt in to Vault, your encrypted conversation data is retained on LLMnesia's servers for as long as your Vault is active, so it can be restored to your other devices. See the Vault section above for how to sign out or request deletion of your Vault backup.

Limited analytics data processed by PostHog may be retained for product analytics, debugging, and improvement purposes. This analytics data does not include AI conversation content, conversation titles, conversation URLs, prompts, responses, search queries, cookies, authentication tokens, or local index data.

Children's privacy

LLMnesia is not directed to children under 13. LLMnesia does not knowingly collect personal information from children under 13.

The extension processes supported AI conversation data locally on the user's device solely to provide indexing and search. LLMnesia does not transmit AI conversation content, prompts, responses, search queries, or local index data from any user, including children, to LLMnesia servers, PostHog, or other third parties.

Changes to this policy

If we update this privacy policy, we will revise the "Last updated" date at the top of this page. Continued use of the extension or website after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, please contact us at hello@llmnesia.com or via the contact form on our website.