Privacy policy for Lodestone — Harmonist Companion
Lodestone — Harmonist Companion by Harmonia
The Lodestone extension shows the Lodestone sprite on a page only when you call it there, with its toolbar button or the right-click item; until then it does not run on the page at all. It reads a page only when you speak to Lodestone there: with each message you send from the extension's panel, it sends harmonism.io your message, the conversation so far in that tab, the page's title and address, and the page's main text (up to about 11,500 characters) or the passage you selected. harmonism.io uses this to answer you. The extension sends nothing while you only browse, and it contacts no server other than harmonism.io and, if you sign in, Supabase, our authentication provider.
Without an account the extension is anonymous. Your messages are sent marked as anonymous and harmonism.io stores none of them; your IP address is used only to limit abuse (a number of messages per hour). The conversation is kept in the extension's own storage for that tab, out of reach of the page you are reading, and erased when the tab closes or the browser quits; a count of anonymous messages is kept in the extension's storage.
If you sign in to your harmonism.io account in the extension's options, your email and password go to Supabase to sign you in, and the session is kept in the extension's storage. Your Lodestone memory (your conversations with Lodestone, including each page reading, and what Lodestone has understood of you) is then kept in the extension's storage in your browser. If you turn on Lodestone sync, that memory is encrypted in your browser under a passphrase only you know before it is stored on harmonism.io, so that your other devices can share it; the passphrase is never sent. Each message you send carries the relevant part of your memory to harmonism.io, which uses it to answer and to update it, and returns it to your browser; harmonism.io keeps none of it after answering. On your account harmonism.io keeps your email, your consent record and your daily message count.
The extension shows no advertising, contains no analytics or tracking, and sells or shares nothing. Removing the extension deletes what it keeps in your browser; a synced copy can be deleted from Lodestone's Settings, under Sync. Full policy: https://harmonism.io/privacy