Nothing it reads is sent to Evidren.

The extension runs only on the web AI chat sites it lists, the ten services named on the download page. It does not run on any other site.

There it reads what you are about to send: the text in the message box when you send it, text or files you paste, and files you choose or drop. Text files, and Word, Excel and PowerPoint files saved as docx, xlsx or pptx, are read for their text up to 20 MB. Other files are not opened, and by default the extension asks before they are sent.

On some of these sites it also checks the requests the chat page sends to the addresses Evidren knows for sending and for typing suggestions, and the message box at that moment, so that it can stop a request that carries a value the check did not clear.

All of this is read on your computer, before the chat page sends it.

In the browser, the extension keeps a record of its decisions: the site, whether it was a message or a file, what happened, how many values of each kind it found, whose rule decided, and when. For a file it keeps only the ending of the name, such as pdf.

It never keeps the text, a value, a file or a file name.

The record holds at most 5,000 decisions, and the oldest are removed first. A send with nothing found is only counted, per site and day, for 31 days. Your own rules are kept as well, and your organisation’s rules if it set any. While a chat tab is open, its check state is kept in the browser’s memory until the tab closes.

The popup shows the record and can export it to a file you save. Removing the extension removes everything it kept in the browser.

The extension sends nothing to Evidren or to anyone else. It makes no network requests of its own, and it has no account and no analytics.

What you send goes to the chat service you chose, as that page sends it. Where a rule says mask, the value is replaced before it is sent. Where a rule says block, nothing is sent. That service’s own terms apply to what it receives.

The extension connects to the Evidren app or the Windows program on the same computer only once that program has been connected to the browser. On a Mac you do that in the app: choose Connect Evidren to the browser, and agree to the files it says it writes. On Windows the installer does it when you press Install, as its page says, and Connect in the Evidren window does it again. The connection goes through the browser’s native messaging: between two programs on your computer, not over the network. When it connects, the extension tells the app its version and whether the browser is Chrome or Edge, and the app keeps a note of the last time it did, with that version, that browser and the extension’s id. Without the app, the extension works on its own.

The app sends the extension the rules in force. The extension tells the app about its decisions, and for a message or a file with findings it hands over the text it checked, so that the app can check it again with its own rules.

The app writes its own line to its record, in your user folder on that computer. In place of the text, and of each value found, the line holds a mask and a short keyed hash, made with a key that stays on that computer. The record stays until you delete it; uninstalling leaves it in place.

Neither the extension nor the app sends what the extension reads off your computer. Evidren has no server that receives it. The app’s two telemetry streams are off by default, and no address to send them to is set, so nothing is sent.

One request Evidren does make is not about the browser: when an AI coding agent connected to Evidren is about to install a package, Evidren asks the public npm or PyPI registry about that package name, when the computer is online.

An organisation can set rules for the extension, through the browser’s policy for managed computers or through the Evidren app: what happens to each kind of data, which sites are turned off, and whether the app must be connected. The rules decide what the extension does. They do not send your messages or the record to the organisation.

Evidren’s team feature is not turned on in this version. It accepts only a team service on the same computer, which is how it is tested, and no setting changes that. No check is shared with a team.

Evidren is built by one person, Erik, in Stockholm. Nothing the extension or the app reads reaches him, so what there is to see or delete is on your computer.