Effective 2026-09-23 · applies to the Fogar browser extension
Fogar is a new tab page that answers questions using a language model running inside your browser, or a cloud model you connect with your own key. It has no server, no accounts, and no analytics. This page says exactly what leaves your browser and when.
Nothing. Fogar does not collect, transmit, or store any personal data on any server, because it has no server. There is no telemetry, no crash reporting, no usage analytics, and no identifiers. The web app at app.fogar.ai is the one exception: Cloudflare, which serves it, counts its page views without cookies or identifiers, and the app says so in its Settings.
| Feature | What is sent | To whom |
|---|---|---|
| Answers, on this device | Nothing. The model file is downloaded once from Hugging Face (huggingface.co) and cached in your browser. Your questions are processed locally. | Hugging Face, once, for the model file only |
| Answers, cloud with your key | Your prompt, the conversation in this tab, and your API key | Only the endpoint you typed in Settings |
| Files you attach to a question | Read inside the page and held in memory for that tab only, never stored. On this device: nothing is sent. In cloud mode, the part of the text that fits the prompt goes with your question. | Nobody, or only the endpoint you typed |
| Web grounding (off until you tick “Search the web first”) | Your question, as a search query | DuckDuckGo’s Instant Answer API (api.duckduckgo.com) and Wikipedia by default, with no key or account; or the search provider you chose and gave a key for |
| Agenda widget (optional) | A request for the calendar address you pasted | Your calendar provider |
| Weather widget (optional) | The city you typed, then its coordinates | Open-Meteo (open-meteo.com), which needs no account |
| Inbox widget (optional) | A request for Gmail’s unread feed, using the Google session already in this browser; or, if you connect an OAuth client you created in your own Google project, a Gmail API search with the token Google gave you. Senders, subjects, and snippets are cached in extension storage for a few minutes. | Google (mail.google.com or gmail.googleapis.com), and nobody else. Fogar has no server in between and no OAuth client of its own |
| Feed widget (optional) | A request for each feed address you added, or the words you typed to the search provider you picked | The feed’s own site; Google News, Hacker News (hnrss.org), Reddit, or Bing for searches |
| Jira widget (optional) | Your JQL query, with the API token you pasted | The Jira site you named |
| LLM Chat widget (optional) | That widget’s conversation and the key of the model profile you picked | On this device: nothing. Otherwise only the endpoint of the profile you chose (Anthropic, OpenAI, Ollama on this computer, and so on) |
| Canvas widget (optional) | When you ask the model to draw: the drawing’s shapes, as text, and your instruction | The model you chose: on this device, or your own endpoint |
| Notebook widget (optional) | A photo you add is downscaled in the page. Read on this device: nothing is sent. Read with a model you connected: the downscaled photo goes to that endpoint, once. Photos are never stored. | Nobody, or only the endpoint you chose |
| Writing widget (optional) | Your writing samples, once, when you press Distill; then the distilled voice profile, the register’s rules, and the text you are rewriting, on each run. On this device: nothing is sent. Samples, profile, and registers are stored in this browser and ride along in backups. | Nobody, or only the model endpoint you picked in the widget’s header |
| Everything else | Nothing. Todos, reminders, recipes, notes, post-its, notebook pages, canvases, chats, links, saved sessions, bookmarks search, and settings all stay in your browser. | Nobody |
The new tab page shows a live count of every network request it has made, by host, in Settings under “Network, this tab”. It is read from the browser's own timeline. If the count says zero, zero requests were made.
Everything Fogar remembers, including your API keys, is stored in Chrome's extension storage on your device and, for model files, in the browser's private file storage. Removing the extension deletes it. Settings has a button to download a complete backup and one to delete the cached models.
The web app at app.fogar.ai keeps the same data in that browser’s storage on that device; a home-screen app on a phone has storage of its own, separate from the browser’s tabs. Its files come from app.fogar.ai, and it carries Cloudflare’s Web Analytics beacon, which counts page views without cookies; the network ledger shows it as cloudflareinsights.com, and it is the one request the web app makes that you did not point somewhere. The extension has no analytics.
| Permission | Used for |
|---|---|
| storage | Saving your settings, todos, reminders, recipes, notes, and widget layout on this device. |
| alarms, notifications | Firing reminders at the time you set, as a Chrome notification. |
| bookmarks | Searching your bookmarks as you type, and removing one when you ask. |
| contextMenus | The right-click “Ask Fogar about …” item. |
| activeTab, scripting | When you use that right-click item, reading the title, address, and text around your selection from that one page, that one time. Fogar never runs on pages otherwise, and what it reads goes only to the model you chose. |
| favicon | Showing site icons next to bookmarks and links. |
| unlimitedStorage | Saved sessions can outgrow the default storage quota. No install warning. |
| Optional: tabs | Only if you add the Sessions widget: listing, searching and saving the titles and addresses of your open tabs, on this device. Chrome labels this permission “Read your browsing history”; Fogar reads open tabs, not your history, and only while the widget is on the page. |
| Optional: identity | Only if you connect Gmail through your own OAuth client in the Inbox widget: opening Google’s sign-in window. The token Google returns is stored in this browser and sent only to Google. |
| huggingface.co | Downloading the model file, once. |
| Optional: any site you add | Requested one at a time when you save a cloud endpoint, a search key, a calendar address, a feed, a Jira site, or a chat model, or connect Gmail, so the extension can reach that address and no other. |
Hugging Face hosts the model files. DuckDuckGo and Wikipedia answer grounding lookups when you ask for them. Open-Meteo provides weather if you add the widget. Google receives the Inbox widget’s requests if you add it; the feed sites and search providers, your Jira site, and the model providers you connect receive what the table above says. All of them are governed by their own policies. Fogar has no relationship with any of them and receives nothing from them. Cloudflare serves fogar.ai and the web app at app.fogar.ai, and counts the web app’s page views with its cookie-free Web Analytics.
Fogar is not directed at children under 13 and, collecting nothing, holds no data about anyone.
If this policy changes, the new version appears here with a new effective date, and the extension's store listing links to it. A change that sends more data than described above would also be announced in the extension itself before it took effect.
Fogar is made by Dylan Roy. The code is public at github.com/dylanroy/fogar; open an issue there, or reach out through dylanroy.com.