Privacy Policy — Semantic Cmd-F

Last updated: May 11, 2026

TL;DR

Semantic Cmd-F runs entirely in your browser. Your queries and the contents of the pages you search never leave your computer. We have no servers, no accounts, no analytics, and no tracking.

What the extension does

When you press the keyboard shortcut, Semantic Cmd-F:

1. Reads the visible text of the page you’re currently on
2. Loads a small machine-learning model (about 22MB) that runs locally inside your browser
3. Compares your query to the page text using that model
4. Scrolls to the most relevant section

All of step 1, 3, and 4 happens 100% locally. Nothing is sent anywhere.

What data we collect

None. We do not operate any servers. The extension has no way to send your queries, page contents, IP address, or any usage information to us, because there’s nowhere for it to send anything.

The extension does not use cookies. It does not embed analytics SDKs. It does not display ads.

Third-party network requests

The extension makes one type of outbound network request, and only on first use:

• Hugging Face CDN (https://huggingface.co/) — when the extension is first activated, it downloads the embedding model file (Xenova/all-mpnet-base-v2, approximately 90MB) from the Hugging Face content delivery network. This is the same as any other website fetching a static file from a CDN. Hugging Face may log this request as part of their normal CDN operations; their privacy policy applies to that request. After the initial download, the model is cached in your browser and no further network requests are made by the extension.

We have no business relationship with Hugging Face. They are simply hosting the publicly available model file we use.

Local storage

The extension stores the following on your own device only:

• The downloaded model file (in your browser’s IndexedDB cache), so subsequent searches don’t need to re-download it
• Per-tab in-memory state about the page you’re currently searching (chunks and embeddings), which is discarded when the tab is closed

None of this data is transmitted off your device.

Permissions explained

The extension’s manifest requests these permissions for the following reasons:

• activeTab — to read the text content of the page you’re currently viewing when you trigger the extension
• scripting — to inject the search overlay into the page
• storage — reserved for future use (e.g., remembering user preferences); not currently used to transmit anything
• Host access (<all_urls>) — the extension needs to work on whatever page you’re reading, so it requests access to all websites. We do not actively access any site except in response to your direct action (pressing the keyboard shortcut or clicking the toolbar icon).

Children

The extension is not directed at children under 13. It collects no information, so there is no information to delete.

Changes to this policy

If we ever change the privacy practices described above (e.g., adding an optional cloud feature in a future version), we’ll update this page and clearly disclose what changed. Any cloud features would be strictly opt-in.

Contact

Questions about this policy? Open an issue on the project’s GitHub repository.