Browser BoltPrivacy
This notice covers the Browser Bolt website and the local, bring-your-own-key software. The website does not ask for an account, payment card, or provider key.
Website visits
Cloudflare delivers and protects the site. It processes technical request information, including IP address, requested URL, browser information, and time. We use Cloudflare Web Analytics for aggregate page views, visits, and page-performance measurements. Cloudflare's browser beacon is enabled outside the EEA, UK, and Switzerland; its regional setting excludes visitors connecting through Cloudflare data centers in those regions. Cloudflare says the beacon does not use analytics cookies or browser storage and discards the source IP at its nearest data center. Cloudflare edge analytics and security processing still apply, and Cloudflare may use security cookies. See Cloudflare's RUM details and privacy policy.
Local software and model providers
Browser Bolt runs locally as an MCP server. Your browser host sends it a goal and observed page context. The published v0.1.0 route sends Jev decisions through OpenRouter. With a Cerebras key, Qwen field-writing requests go directly to Cerebras; with one OpenRouter key, both requests use OpenRouter. Context can include page URLs, visible text, field labels and values, and recent actions. Your host executes browser actions and may keep its own records. Provider and host terms and privacy practices apply. Browser Bolt does not provide universal redaction or control provider retention.
Keys and messages
Keys stay in the local host environment or secret manager you choose; the Browser Bolt website does not collect them. If you email support, we receive your address, message, and attachments to respond. Do not send credentials or private page content.
Retention and requests
There is no single published retention period for website requests, Cloudflare processing, and email. We do not promise immediate deletion from provider logs or backups. Email rich@valentelabs.ai to request access, correction, or deletion of information we control. Describe the interaction without sending sensitive documents in the first message. Applicable rights depend on where you live and the processing involved.
Provider details: OpenRouter, Cerebras, HEY, and GitHub. See the data boundary before running browser tasks. We will date changes to this notice on this page.