CopyCat for Chrome privacy
Effective October 7, 2026
CopyCat for Chrome records browser actions and screenshots after you click Start recording. It follows ordinary website tabs in that Chrome window without a screen/application-sharing picker or recording tab. Other Chrome windows and internal browser pages are excluded. New recordings contain actions and screenshots rather than continuous video; existing video recordings remain usable. No microphone or system audio is captured. Recordings, workflows, tutorials, exported artifacts, transcripts and device credentials are encrypted locally with AES-GCM. The encryption key is in the same profile and does not protect against someone controlling your unlocked profile.
Stopping a new recording automatically selects representative screenshots locally and submits those screenshots with necessary tab/navigation and nonsensitive action context to CopyCat and its AI inference provider. No blackout is applied by default. Optional local privacy editing affects future outputs and cannot recall images already submitted. Saved instructions, clarification answers and selected workflow context are used for automation and durable tutorial generation. Optional AI narration sends scene narration text through the existing speech service. Legacy video and local PDF/DOCX/PPTX/MP4 rendering stay in your browser; executable renderers are packaged locally. Pause before passwords, sign-in or sensitive information. Browser-based sensitive-input detection also pauses recording without requiring website recording access. Page text and screenshots can contain personal information. Analysis, replay, tutorial generation and narration consume prepaid credits shared with your CopyCat desktop account; connecting and local exports do not purchase inference.
New browser inference payloads and results expire after 24 hours. Billing receipts, account information and recording-analysis jobs follow the existing CopyCat privacy and retention policy. Local content remains until you delete it or remove the extension. Deleting local content does not erase existing billing receipts.
Tab metadata permission scopes recording to its initiating Chrome window and supports automatic task-tab matching; no browsing-history permission is requested. Recording uses the debugger permission for browser event collection and screenshots, without per-site recording grants. Chrome may display its debugger notice; dismissing it pauses CopyCat. YOLO is on by default when no preference is saved; existing saved choices are preserved. When enabled, Chrome requests optional access to HTTP/HTTPS websites and CopyCat automatically approves task actions, screenshots sent for inference and task-required website access. Disable YOLO in Account & settings to approve website origins and browser actions. Sign-in and essential questions still pause. The optional Cat cursor marks automation targets, can be disabled, is removed before capture and does not appear in exported evidence. Browser skill exports download files with import guidance and cannot install into another app’s local directory. CopyCat does not sell browsing data or use it for advertising. AI replies choose validated operations and cannot provide executable code or remote scripts.
We do not sell user data. We do not use or transfer user data for purposes unrelated to CopyCat’s disclosed features, or to determine creditworthiness or for lending. Necessary workflow content is sent to our AI service providers to deliver requested analysis, replay, tutorials and narration.
To remove local content, use the recording and history Delete controls or uninstall the extension. Disconnect revokes this Chrome device credential. For account deletion or privacy requests, use the contact destination on the CopyCat support page.