Privacy

Last updated: 13 October 2026

Octoweb is a local application. It has no backend, no account system, and no analytics. This page describes what it stores and when data leaves your Mac.

What stays on your machine

  • Browsing history and sessions — kept in ~/Library/Application Support/octoweb/, capped by max_history in your config.
  • Workspace data stores — cookies, localStorage, and cache live in a separate WebKit data store per workspace and are never shared between them.
  • Favicons — cached as base64 data URIs, so startup makes no network calls.
  • Prompt history — sidebar and inline-edit prompts are stored in ai_prompt_history.json, capped by your config.
  • Keybindings and settings — plain files under ~/.config/octoweb/ and the application support directory. Delete them and the app returns to defaults.

What the browser sends

Page requests go to the sites you visit, exactly as any browser does, and mail goes to the mail servers of the accounts you add. Beyond that, Octoweb itself sends nothing: there is no telemetry, no crash reporting, no update ping, and no usage analytics.

Mail and Google user data

The mail pane connects to the mailboxes you add: Gmail, iCloud, Outlook, or any IMAP server. When you sign in with Google, Octoweb asks for one permission, https://mail.google.com/, because reading and sending mail over IMAP and SMTP requires Gmail's full mail scope.

  • What it reads — message headers, bodies, and attachments in your mailbox, to show your inbox, conversations, and search results.
  • What it changes — only what you ask for: sending mail you write, and archiving, marking read or unread, or moving your conversations.
  • Where it is kept — a local cache at ~/Library/Application Support/octoweb/mail.sqlite on your Mac. The Google sign-in token and mail passwords are stored in the macOS Keychain. Mail is exchanged only between your Mac and your mail provider; nothing is sent to Muvon or any other server.
  • Who else can see it — no one by default. If you turn on Mail AI in Settings (it is off by default), the text of the conversations you use it on goes to the octomind agent on your Mac, which sends it to the model provider you configured, with your key. Local MCP clients you run can search and read mail and create drafts for you to review through the MCP server described below; they cannot send, archive, or delete mail.
  • Retention and deletion — cached mail stays on your Mac until you remove the account in Settings → Mail, which deletes its cached mail and its Keychain entries. You can revoke Octoweb's access at any time at myaccount.google.com/permissions.

Octoweb does not use Google user data for advertising, does not sell it, and does not use it to develop, improve, or train AI or machine-learning models. Octoweb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI features

The AI sidebar, inline edit (⌘⇧E), and proactive learning connect over ACP to an octomind agent running on your own machine. That agent — not the browser — calls whichever model provider you configured, using your API key. If you never start octomind, nothing AI-related runs at all.

Proactive learning is off by default. If you turn it on, every 30 minutes it passes your open tabs, recent history, and the active page's text to the local learning agent, which stores insights in octomind's local memory. Turn it on or off in Settings (⌘,) or with proactive_learning in your config.

The MCP server

Octoweb listens on localhost:3434/mcp so local MCP clients can drive the browser. It binds to loopback only. Any client that can reach it can read page content and history, so treat it like any other local development port.

This website

octoweb.xyz is a static site. It uses Google Analytics 4 to count page views, which sets cookies — the script is not requested until you interact with the page, and it is the only third-party resource here. Nothing on this site is personalised, and the host records standard server logs we do not build profiles from. Blocking it changes nothing about how the site works. This is the website only; the browser itself still sends no telemetry.

Verifying all of this

Octoweb is Apache 2.0-licensed. Everything above is checkable in the source, which is the point of shipping it open.

Contact

Questions: [email protected], or open an issue.