# Privacy and permissions

The current extension runs locally without a Tholi account. Choose which
websites Tholi can access and use its data controls when you want to forget
something.

## Allow website access

1. Open the website where you want help and select the Tholi toolbar icon.
2. Review the browser's website-access request and allow only the website you
   intend to use.
3. If a task reaches another website, review any new request before continuing.

Installation does not grant access to every website. Declining access leaves
that website unavailable for guidance. You can review or revoke access in the
browser's extension settings. Restricted browser pages cannot be guided.

## What Tholi uses

Tholi reads page controls, labels and headings to suggest a next step. Normal
guidance processes this context on your device. Visual assistance can use
temporary screenshots when available; editable fields and embedded frames are
masked. Tholi cannot promise to identify every sensitive label on every page.

Enter passwords, verification codes and other private form values directly on
the website. You remain responsible for signing in and reviewing purchases,
deletions, submissions and other consequential actions.

Tholi can keep reusable website knowledge and saved routes in this browser.
Task details, drafts and conversation are session information. These do not
synchronize to the Tholi website or between your browsers.

## Forget routes or website memory

Open **Tholi settings** and enable **Advanced controls** if needed.

- In **Saved routes**, use **Forget route** to remove one reusable route.
- Under **Your data**, choose **Forget this website** to delete its learned
  knowledge and reusable routes. Active guidance on it stops.
- Choose **Clear all site memory** to remove learned knowledge and reusable
  routes for all websites. Review the confirmation before continuing.
- **Reset current session** clears tasks, the draft and conversation. It keeps
  saved website knowledge and routes.

## Optional private connections

You do not need a backend connection for normal use. If you choose to connect
your own private backend, the extension explains the data it sends before you
enable it. Sending temporary masked images is a separate option. Firefox also
requests data-transmission consent for an enabled connection.

If a connected backend is offline during deletion, reconnect and retry the
failed deletion. Disabling a connection or revoking access does not erase data
already on that server. Setup details are linked from [For developers](https://tholi.io/docs/developers).

The website has separate cookies and measurements. Read the
[privacy notice](https://tholi.io/privacy) and [cookie notice](https://tholi.io/cookies)
for the full current disclosures.