Your Data Never Leaves Your Control

Ceki was built around one principle: the host's personal data is sacred. Every technical decision serves that goal.

How Sessions Are Isolated

When an AI agent rents your browser, it doesn't get access to your browser. It gets a fresh incognito profile — a clean, temporary environment with no connection to your personal data.

🔒

Your Profile

  • Saved passwords & autofill
  • Cookies & active sessions
  • Browsing history
  • Bookmarks
  • Installed extensions
  • Downloads & local files
  • Browser settings
Sandboxed Isolation
🖥

Guest Session

  • Blank Chrome incognito window
  • Your real IP & fingerprint
  • Nothing else

You Decide What's Allowed

🚫

Blocked domains

Add any website to your blocklist. Guests cannot navigate to blocked domains — the request is silently dropped.

Restricted commands

Allowed

  • Navigate URLs
  • Click elements
  • Type text
  • Take screenshots
  • Query DOM

Not allowed

  • File system access
  • Install/modify extensions
  • Change browser settings
  • Open DevTools
  • Execute arbitrary JS
  • Access tabs outside session
🙌

Human action requests

When a guest hits a CAPTCHA, they can request your help. You see a notification with details. You explicitly accept or decline each request.

How the Connection Works

🤖AI Agent
encrypted
🔒Ceki Servers
encrypted
🔌Your Extension
🕵Incognito Window
  • Agent sees: secure endpoint on Ceki's servers (not your IP)
  • Your extension connects outbound (no inbound ports needed)
  • No peer-to-peer connection between agent and host
  • Session data is not stored — proxied in real time

Frequently Asked Questions

Common questions about security

Have more questions?

Check the documentation or reach out to the team

Confident enough to start?

Browser Session Isolation: How Your Data Stays Protected During Browser Sharing

Show Less

The first question everyone asks about browser sharing is: "Is my data safe?" The short answer is yes — and here's exactly how session isolation works to protect your personal information.

The incognito barrier

Every guest session runs in a dedicated Chrome incognito profile. This isn't regular incognito mode — it's a fully isolated browser context with zero access to your default Chrome profile. What this means: separate cookie jar, separate localStorage and sessionStorage, no access to saved passwords or autofill, no bookmarks, no browsing history, no installed extensions, no downloads or file system access. When the session ends, ALL incognito data is deleted. The guest starts with a completely blank Chrome window.

Command restrictions

Even within the incognito session, guests can only use a whitelisted set of commands. Allowed: navigate to URLs, click at coordinates, type text, take screenshots, scroll, upload files, query DOM elements. Blocked: access file system, manage extensions, open DevTools, execute arbitrary JavaScript, modify Chrome settings, open new windows outside incognito, access other tabs. These restrictions are enforced at the extension level.

Domain blocklist

Hosts configure a list of domains that guests cannot visit. Attempting to navigate to a blocked domain is silently prevented. Common blocklist entries include banking sites, email providers, social media accounts you personally use, and other sensitive domains.

Human action requests

Some tasks require human intervention — solving a CAPTCHA. These are handled through the chat system: agent sends a request, host receives notification, host can see the page state, host chooses to help or decline, performs the action, confirms completion. Every step requires explicit host approval. Hosts can end the session at any time.

What the guest does get

Your real IP address (websites see your residential IP), your real hardware fingerprint (WebGL, Canvas, AudioContext from your actual GPU/CPU), your real timezone and locale, your real screen resolution and fonts. This is what makes the service valuable — agents pay for authenticity. But none of this is personal data like passwords, accounts, or browsing history.