The short version: CoworkGuard collects no user data whatsoever. Everything it does happens on your own machine. No data is sent to any server operated by CoworkGuard or any third party.
CoworkGuard is a local privacy and security tool that monitors outbound network requests from your browser to api.anthropic.com and warns you when potentially sensitive data may be included in those requests.
CoworkGuard stores the following data only on your local machine, in ~/.coworkguard/:
| Data | Purpose | Raw content stored? |
|---|---|---|
| Audit log entries | Local review of intercepted requests | No — only SHA-256 hash, byte size, pattern type, severity, and redacted preview |
| Settings file | Your configuration preferences | Yes — contains only your chosen settings, no personal data |
Raw payload content is never stored. When a request is scanned, CoworkGuard stores only a SHA-256 hash of the payload (which cannot be reversed), the byte size, the type and severity of any detected pattern, and a redacted preview showing only the first 2 and last 2 characters of any match.
| Permission | Why it is needed |
|---|---|
| tabs | Detect when Claude.ai or Cowork is open to determine active session status |
| activeTab | Inject the warning banner into the current tab when a sensitive domain is visited |
| storage | Save settings and audit log locally using chrome.storage.local |
| webRequest | Inspect outbound request headers to detect CoworkGuard proxy tags |
| notifications | Show a browser notification when Cowork is active on a sensitive domain |
| <all_urls> | Inject warning banners into any page navigated to while Cowork is active |
CoworkGuard does not share data with any third party. The extension communicates only with localhost:7070 — the local CoworkGuard server running on your own machine — and with the content of tabs you are currently viewing, solely to inject warning banners.
It does not communicate with any external server operated by CoworkGuard or any partner.
CoworkGuard is a developer and security tool not directed at children under 13.
If this policy changes materially, we will update the date above and note the changes in the Chrome Web Store listing description.
For questions about this privacy policy or CoworkGuard's data practices, please open an issue on the GitHub repository.