Privacy Policy

three.ws Walk Avatar Chrome Extension · Last updated 2026-05-25

What we collect

The extension stores the following data locally on your device via chrome.storage:

• Avatar selection — the ID of the avatar you chose to display
• Settings — walk speed, position, size, site allowlist/blocklist, narration preference, voice selection
• Session token — a three.ws authentication token if you sign in, stored in chrome.storage.local (device only, not synced)

What we do not collect

• We do not collect or store the content of pages you visit
• We do not track browsing history
• We do not sell any data to third parties
• We do not use analytics or tracking pixels in the extension itself

Network requests

The extension makes network requests only to three.ws:

• https://three.ws/api/avatars/* — to fetch your avatar list and GLB model URLs when you open the popup
• https://three.ws/walk-embed — the avatar iframe that renders the 3D character on your screen
• https://three.ws/api/tts/speak — only when you explicitly enable "Read page sections aloud" in settings. Text from the visible section is sent to this endpoint to generate audio. This feature is disabled by default.
• https://three.ws/api/me — once per popup open to verify your session, if signed in

No requests are made to any third-party domains.

Permissions used

• storage — to save your settings and session token locally
• activeTab — to read the current tab's domain name and send messages to the content script
• scripting — to inject the avatar into tabs where you have explicitly enabled it via the popup toggle
• <all_urls> — required because you can enable the avatar on any website you choose; the script is only injected when you explicitly enable it

Data retention

All data is stored on your device and can be cleared at any time by clicking "Sign out" in the extension settings or by removing the extension from Chrome.

Contact

Questions? Email privacy@three.ws or visit three.ws.