BROWSER EXTENSIONS

Privacy: Cosmic Unicorn and Cosmic Chariot browser extensions

Last updated 2026-11-08. Publisher: Matriarch Solutions Inc (Reach's legal entity), for THEONE COSMOS. Contact: [email protected], or the contacts on https://cosmic-mcp.app Published at https://cosmic-mcp.app/extensions/privacy

What the extensions read

• The page you are on, only after you click the extension's toolbar button or its right-click menu on that page. They look for Veritas receipts, receipt ids, agent passports (did:web), session ids, Veritas badges and, if you turn it on, image links. They never read passwords, form fields, cookies or site storage.
• What you paste into the Check box.

What leaves your browser

• When you press Verify (or run a tool), the item you picked and the address of the page it came from go to THEONE COSMOS (https://cosmic-mcp.app), which checks it with Veritas and answers. Nothing is sent while you only scan.
• Sign-in goes through COSMOS with your TheOne account (Google or Apple). The extensions get a short-lived access token and a refresh token from COSMOS. They never see your Google or Apple password.

What is stored in your browser

• Tokens: the access token in session memory (gone when the browser closes), the refresh token in extension storage so you stay signed in. Signing out revokes both.
• Settings and a history of your checks: the tool, the answer, the site's origin and the ids checked. Not page text, not full addresses. You can turn history off or clear it in Settings.
• A diagnostics log of error codes and request ids for this browser session.

What we do not do

No ads, no analytics, no tracking, no sale or transfer of data, no use for credit or lending. Data is used only to verify what you asked to verify. COSMOS keeps an audit record of each call (tool, time, result code) under the THEONE COSMOS privacy policy.