Privacy Policy

BWAV: Bulk WhatsApp Number Checker with MCP (the "extension") — effective October 10, 2026.

Short version: this extension collects nothing. No accounts, no analytics, no tracking, no servers, no ads, no selling of anything. Everything happens in your browser.

What the extension does

The extension checks whether phone numbers are registered on WhatsApp by opening or reusing a WhatsApp Web tab in your own browser and inspecting the page, the same way you would by hand.

Data we collect

We do not collect any data. The extension has no backend, no analytics, and no third-party services.

Phone numbers you check

• Numbers you enter are stored locally in your browser's chrome.storage.local so your job state survives restarts.
• To perform a check, the extension sends the number to web.whatsapp.com inside your own logged-in WhatsApp Web session — the same request your browser would make if you opened that chat URL yourself.
• Numbers are never transmitted to us or to any other server.

Optional AI Agent (MCP) bridge

The extension can optionally run a local bridge (mcp/server.js) that listens on 127.0.0.1 only, protected by a token you generate. It is off by default. When enabled, it lets AI agents on your own machine submit checks through the extension. Nothing from this bridge leaves your computer.

Permissions

• storage / unlimitedStorage — save your settings and job state locally.
• tabs — find and reuse your existing WhatsApp Web tab.
• clipboardWrite — copy the MCP agent config when you ask it to.
• web.whatsapp.com — the core function: inspect the page to determine registration status.
• 127.0.0.1 / localhost — the optional local MCP bridge.

Data retention & deletion

All data is stored locally in your browser. You can delete it at any time by clearing the extension's data in chrome://extensions or by uninstalling the extension.

Changes

If this policy changes, the effective date above will be updated.

Contact

Questions? Open an issue on GitHub or visit heyjuyel.com.