Privacy Controls

modelBridge is designed with a local-first approach. Your creative work — prompts, generated media, project structure, file paths — stays on your machine. The plugin sends only what’s necessary to generate AI content (via fal.ai) and nothing else by default.

What is never transmitted

Regardless of any setting, modelBridge never sends:

• Your prompts or negative prompts
• File paths or file names
• Generated media or previews
• API keys (fal.ai or Anthropic)
• License keys
• Project or sequence names
• Search queries
• Chat messages (Agent Mode conversations go to Anthropic via your own API key — never through modelBridge servers)

Error telemetry (opt-in)

When something goes wrong during a generation, modelBridge can send a minimal error report to help improve the plugin. This is off by default — you must explicitly enable it in Settings.

What is sent

• Error type and source (e.g., “validation error from fal.ai”)
• HTTP status code
• A truncated error message (maximum 300 characters)
• Model ID (which model was involved)
• Whether the error was retryable
• Plugin version, host app version, and platform (macOS)

What is scrubbed

Before any error report is sent, PII is automatically removed:

• Email addresses
• URLs and file paths
• API tokens and keys

How to enable or disable

Go to Settings in the plugin. The error telemetry toggle controls whether error reports are sent. Turning it off stops all error reporting immediately — no data is queued or sent retroactively.

Behavioral analytics (opt-in)

Separate from error telemetry, modelBridge offers behavioral analytics that track usage patterns — which features you use, how often, and in what order. This is also off by default.

What is sent

• Feature usage events (e.g., “opened Dual Mode”, “exported CSV”)
• Event timestamps
• An anonymous installation ID (a hash derived from browser signals — not linked to your identity, fal.ai account, or license)

What is never sent

• Prompt content, file content, or media
• API keys, license keys, or account identifiers
• Model outputs or generation results

How to enable or disable

Toggle behavioral analytics in Settings. When disabled, no events are collected, queued, or transmitted.

Installation ID

If you enable behavioral analytics, modelBridge generates an anonymous installation ID — a 16-character hex string derived from a SHA-256 hash of stable browser signals. This ID:

• Cannot be traced back to you, your fal.ai account, or your license
• Is stored locally in your browser’s localStorage
• Is only transmitted if behavioral analytics is enabled
• Changes if you clear your browser data

Where your data lives

All modelBridge data is stored locally:

Data	Storage	Survives updates
Installed models	localStorage + disk file	Yes
Generation history	localStorage + disk file	Yes
Cost history	localStorage + disk file	Yes
Learned constraints	localStorage + disk file	Yes
Settings & preferences	localStorage + disk file	Yes
API keys	Local .env file (fal.ai) / localStorage (Anthropic)	Yes
License state	localStorage + disk file	Yes

Disk files are stored in a data directory outside the extension folder, so they survive plugin updates and CEP cache clears.

GDPR rights

You can request deletion of any data modelBridge holds about you. Since almost all data is local, you control it directly. For server-side data (if you’ve opted into telemetry), contact us to request deletion.

The plugin does not use cookies, does not fingerprint users, and does not share data with third parties beyond fal.ai (for generation) and Anthropic (for Agent Mode, using your own key).

See also

• Privacy Policy — full legal privacy policy
• Settings Tab — where to find telemetry toggles
• Agent Mode — how Agent Mode conversations are handled