What it asks for, and what runs inside it.
The manifest verbatim, the models it bundles, and the one-minute check that confirms the network claim without taking our word for it.
It asks for nothing when you install it.
"permissions": ["clipboardWrite", "storage", "offscreen", "scripting"], "host_permissions": []
Four permissions, and not one of them is a website. host_permissions is an empty array, so a fresh install cannot read any page you visit.
There are no static content scripts either. The in-page script is registered at runtime, and only after you turn in-page masking on and grant the origins yourself.
What it can ask for later
- claude.ai, chatgpt.com, gemini.google.comOnly if you turn the in-page Mask button on, and only after you grant them.
- 127.0.0.1, localhostOnly if you pair the extension with the desktop app to borrow its larger model.
Regex and a real model, both inside the extension.
This is not a regex-only cut-down of the desktop app. It bundles the Tier-1 BERT lite model and reports its tier as regex+lite. GLiNER never runs here, because a 1.1 GB model does not belong in a browser extension. If you also run the desktop app, the extension can borrow GLiNER over loopback, and that pairing stays off until you turn it on.
Check the network claim yourself
This is the one Velum surface with literally zero network at runtime, and it takes about a minute to confirm.
- 01Open the popup, right-click inside it and choose Inspect.
- 02Switch DevTools to the Network tab.
- 03Set Chrome to Offline in the throttling dropdown.
- 04Mask something, then unmask it. The request count stays at zero.
What the size buys
A model that runs on your machine has to be on your machine.
- store package
- 151 MB
- model directory, unpacked
- 173 MB
- built extension on disk
- 226 MB
The session mapping is the other half: it lives in memory and in chrome.storage.session, so closing the browser ends it.
See it work on your own data.
Tell us what you work with and we will walk you through it on a call, on your own files. Nothing leaves your machine while we do.
Your address is used to reply to you, and for nothing else.