Ren HandsRen Hands privacy policy
Ren Hands sends what it sees in the Ren window to your own Ren account, so Ren can do the task you asked for. Built-in steps never record what you type in password fields and never send cookie or header values. Page scripts Ren runs have the same access as the page itself: they can read anything that page can, including form fields and data the site keeps in this browser. Data Ren requests from sites uses your signed-in session.
What Ren Hands is
Ren Hands is a Chrome extension. It lets Ren, the assistant in your Ren account, do the browser tasks you ask for. Ren does them in a window it opens in your Chrome profile, signed in to your sites as you. Ren Hands works only with a Ren account. Your Ren account itself is covered by Ren's privacy policy.
Ren Hands reads and sends nothing until you read its notice and click I agree.
What it asks Chrome for
| Permission | What it is for |
|---|---|
debugger | Clicks, types, scrolls, reads the page and takes screenshots in the window or tab Ren opens for a task: a small side window by default, or a background tab if you turn side windows off. It is attached there only while a task runs. During that time Chrome shows a bar that says "Ren Hands" started debugging this browser. Cancel on that bar stops the task. |
storage | Remembers in this Chrome profile that you agreed to the notice, a random install number, the Ren email or user name you last connected with, the connection to your Ren account and its hand name, the Google email it last read, your settings, the windows it opened and your last 20 tasks. |
alarms | Wakes Ren Hands once a minute, so it stays connected and picks up the tasks you asked Ren for. |
identity and identity.email | Reads the Google email this Chrome profile is signed in with, only after you agree to the notice. Ren uses it to tell your Chrome profiles apart and to warn you when an account it does not know asks to connect. A matching account only lets your phone show number buttons instead of a box to type the number in; the number check and the Connect click always apply. It does not sign you in to anything and gets no access to your Google account. |
Site access to https://ren.1088labs.com only | The one server Ren Hands talks to. This version cannot be pointed at any other server. Ren Hands has no other site access and adds nothing to the pages you browse. It works on other sites only inside the Ren window, through the debugger permission above, as part of a task you asked for. |
What it sends, and where
| Data | Comes from | Goes to |
|---|---|---|
| Your Ren email or user name | You type it on the Ren Hands connect page. It is never filled in from Chrome. | Ren's server at ren.1088labs.com, to send the request to your phone. If it matches no Ren account, nothing goes to any phone and the request ends after 5 minutes. After you connect, this Chrome remembers it for next time. |
| The Google email of this Chrome profile | Chrome, on this device | The Ren account you name when you connect: its phone shows it next to the request, so type your own. Then your Ren account each time Ren Hands checks in. Ren shows it to you next to this Chrome. |
| Chrome version, operating system, Ren Hands version, hand name and a random install number | This device and Ren Hands | Chrome version and system go with a connect request, to the Ren account you name. The install number, Ren Hands version and hand name go with every request to your Ren account, so Ren knows which Chrome is which. |
| Your network address | Your internet connection, as with any website | Ren's server. It is kept with a connect request for up to 10 minutes, and for up to 24 hours to limit repeated attempts. Your phone only learns whether this Chrome is on the same network as the phone or a different one, never the address. Ren's own service logs are covered by Ren's privacy policy. |
| Connection key | Your Ren account, after you approve this Chrome and click Connect | Kept in this Chrome profile. Sent only to ren.1088labs.com, to prove requests come from this Chrome. Deleted when you disconnect. |
| Screenshots of the Ren window | The pages Ren opens for a task. They show what the page shows, for example a cart or an order. | Your Ren account, where they show in your Ren chat. |
| Page addresses and titles | The pages Ren opens for a task | Your Ren account, in the task's results. |
| Page text, and lists of the buttons, links and fields on a page | The pages Ren opens, when the task needs to read them | Your Ren account, up to 12,000 characters per read. Built-in steps leave out what you typed in password fields. |
| Results of short page scripts | Scripts from your Ren account that run in the Ren window for your task, for example to read prices from a product page. They have the same access as the page itself, including form fields and data the site keeps in this browser. | Your Ren account, up to 2,000 characters each. |
| Data Ren requests from sites you are signed in to | The site open in the Ren window. Ren Hands asks for it the way the page itself does, with your signed-in session, so it can read what that site shows you. | The request goes to that site. Up to 200 KB of the answer goes to your Ren account. |
| Site notes, only when you ask Ren to learn a site | The Ren window: which requests it made, their addresses, status, type and size, the names of their headers, and request bodies up to 2 KB | Your Ren account. Cookie and other header values are never kept. For anything that looks like a login, password or card form, only the length is kept. |
| Recordings, only when you ask Ren to watch you | Your clicks, typing, choices, scrolling and page changes in the Ren window, for up to 30 minutes | Your Ren account. Passwords, card numbers, one-time codes and other secret-looking fields are left out. Other typed text, including the user name or email on a sign-in page, is kept up to 200 characters. Secret values in page addresses are hidden. |
| Task results and log | Ren Hands | Your Ren account: which steps ran, how many clicks were refused, how long it took. Text Ren typed, page scripts and request bodies show in the log only as a character count. |
| Your last 20 tasks | Ren Hands | Kept in this Chrome profile for the Ren Hands button. Never sent. |
Who else gets it
- Anthropic, the AI that carries out your request. To work on your task, Ren sends Anthropic's AI the screenshots and page text the task needs. Section 4 of Ren's privacy policy explains how. Anthropic processes it to answer you and keeps it for a limited time under its terms. Deleting your Ren account does not delete Anthropic's copy.
- The sites Ren opens for you. Pages in the Ren window load like any page you open yourself, signed in as you.
- Nobody else. Ren Hands sends nothing to Google, to advertisers or to data brokers. It has no ads, no analytics and no tracking.
What built-in steps leave out
Built-in steps never record what you type in password fields and never send cookie or header values. Page scripts Ren runs have the same access as the page itself: they can read anything that page can, including form fields and data the site keeps in this browser. Data Ren requests from sites uses your signed-in session. Ren Hands does not read your other tabs or your browsing history.
Google data and Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
For everything Ren Hands collects, that means:
- It is used only to run the browser tasks you ask Ren for and to show you what happened.
- It is never sold. It is not used for ads, to judge credit, or for lending.
- It is not passed on, except to Anthropic's AI to carry out your request, to keep the service safe, to follow the law, or if the business is merged or sold.
- People at 1088 Labs do not read it unless you ask us to, for example for support, or when security or the law requires it.
How long it is kept
- In this Chrome: Disconnect deletes the connection key and the Ren email or user name you last connected with. Your agreement to the notice, your settings, your last 20 tasks, the Google email Ren Hands last read and its install number stay until you remove Ren Hands. A connect request in progress ends when Chrome closes or after 5 minutes.
- In your Ren account: tasks, screenshots, recordings and site notes are stored with your Ren account and handled under Ren's privacy policy. That policy also says how to download your data, delete it, and delete your account.
Disconnect and uninstall
- Disconnect in Chrome: click the Ren Hands button in the toolbar, then Disconnect. Ren Hands tells your Ren account to drop this Chrome and deletes its connection key.
- Disconnect from Ren: open Ren, tap More, then Settings, then Ren Hands, then Disconnect next to this Chrome.
- Pause instead: untick Accept jobs in the Ren Hands button. Ren starts no new tasks until you tick it again.
- Uninstall: right-click the Ren Hands button and choose Remove from Chrome. Chrome deletes everything Ren Hands kept in this profile and opens a page with the last step: if you did not click Disconnect first, Ren keeps listing this Chrome, as offline, until you disconnect it in Ren.
Security
Everything Ren Hands sends travels over HTTPS to ren.1088labs.com. A new Chrome connects only after you approve it on your phone and then click Connect in Chrome. A wrong number cancels the request. Ren tells you each time a Chrome connects.
Children
Ren Hands works only with a Ren account, and Ren is for adults 18 and over. Ren Hands is not meant for children, and we do not knowingly collect data from anyone under 18.
Changes
We post changes here with a new effective date. A change that sends a new kind of data needs a new version of Ren Hands and a new notice in the extension first.
Contact
1088 Labs LLC. Email info@1088labs.com.