1. Single purpose

Tomarigi reads AI coding agent (e.g. Claude Code) session transcript files from a local folder the user explicitly selects, and shows each session's status as a bird. No user data is collected or used beyond this, and beyond the optional BYOK-powered features described in item 3.

2. No servers; network traffic only for the opt-in BYOK features

No developer-operated backend. By default, no network communication of any kind occurs: transcripts, statuses, and settings never leave the machine, and notification chirps are synthesized in the browser. The only exception is the optional Anthropic API key feature (off by default unless a key is saved) — see item 3.

3. Data collection

None of the Chrome Web Store data categories is collected by the developer. The only files read are transcripts inside the folder picked via the File System Access API dialog, read-only, entirely on-device; this reading never leaves the device. If the user supplies their own Anthropic API key in Settings, that key enables two direct browser-to-Anthropic requests using api.anthropic.com: (a) a voice summary of a finished session, sending the user's prompt snippet and the agent's final response text for that turn, and (b) a connection test, sending a fixed ping payload with no session content. Both are direct requests from the user's browser to Anthropic, not something the developer receives, stores, or can see. Authentication credentials: the extension has an API key input field in Settings; the key is used only for these direct browser-to-Anthropic requests and is never sent to the developer.

4. Stored on device only

Folder references (FileSystemDirectoryHandle) with user labels, the mute setting, the voice narration on/off setting, and the garden-tab bird position layout, all in the extension's IndexedDB, plus — if the user saves one — the Anthropic API key. The API key is stored unencrypted, on-device only, and only for as long as the user keeps it saved. The extension also persists an event history (up to 500 entries, no TTL) of session state transitions (started/done/waiting/etc.) with timestamps, including a short, formatted snippet of the user's most recent prompt at that point; it is viewable only in the debug screen (bug icon in the header, or ?debug=1) and is never transmitted anywhere. There is no manual delete for the voice setting, garden positions, or event history — the event history simply rolls off past 500 entries. Removing a folder deletes its reference; deleting the saved API key removes it immediately; uninstalling deletes everything.

5. Permissions

The manifest permissions list is empty. Folder access is granted only through the File System Access API dialog, explicitly, read-only. The Anthropic API key feature requires no manifest permission either — the browser-to-Anthropic request relies on Anthropic's API allowing direct browser access, not on any host_permissions entry.

6. Changes

Posted on this page with an updated date.