Did you know a 4GB AI model might already be sitting inside your Chrome profile without you ever clicking “install”?
A privacy researcher says that file is not hidden malware or cache clutter, but part of Google Chrome’s on-device AI system linked to Google Chrome.
Security researcher Alexander Hanff, known online as “The Privacy Guy”, claims Chrome silently downloads a large AI model file named ‘weights.bin’ into a folder called ‘OptGuideOnDeviceModel’.
On a fresh Chrome profile, he observed the browser creating a temporary directory, downloading components, and assembling the full model locally in around 15 minutes.
No prompt was shown, and no user action was required.
The same behaviour has reportedly been observed on Windows 11, macOS (including Apple Silicon), and Ubuntu systems, with some users only noticing it after unexplained storage spikes.
The file is associated with Google’s on-device AI system, including Gemini Nano, which supports certain Chrome features.
It typically sits in paths such as:
Users who delete it often find it reappears after restarting Chrome.
Hanff reports that unless specific settings are changed, the browser simply downloads it again in the background.
Reports of unexplained storage usage linked to this file have been circulating in developer forums for over a year, suggesting it may have been quietly present on many systems without user awareness.
The model is designed to power on-device AI features in Chrome, including writing assistance, scam detection, page summarisation, smart paste suggestions, and tab organisation tools.
However, users may assume these features run entirely locally.
In practice, Chrome’s “AI Mode” in the address bar routes queries to cloud servers, meaning the local model is not always involved in user-facing AI interactions.
Google states the model helps enable “important security capabilities” and developer APIs, and may be automatically removed if device storage is low.
As Google explains in its support documentation:
Chrome may download on-device generative AI models in the background so features remain ready when needed.
Hanff argues the behaviour raises legal concerns under European privacy law, pointing to rules requiring clear, informed consent before storing data on a user’s device.
He references both the ePrivacy Directive and GDPR principles around transparency and data protection by design.
He also compares the case to recent claims involving Anthropic’s Claude Desktop software, where he alleges browser integrations were installed without explicit user approval.
Google has defended the approach, saying:
“We’ve offered Gemini Nano for Chrome since 2024 as a lightweight, on-device model… Chrome may download on-device Generative AI models in the background, so features that rely on these on-device models stay ready for use.”
The company also said users can now disable and remove the model in settings, and that it will no longer download once turned off.
Hanff warns that distributing a 4GB model across Chrome’s global user base could carry a significant environmental footprint.
With billions of installations, he estimates emissions could range between 6,000 and 60,000 tonnes of CO₂-equivalent, depending on download scale and infrastructure usage.
Source: The Privacy Guy
He argues that even if each download is small individually, the cumulative effect becomes meaningful at Chrome’s scale.
Users who want to verify whether the model is installed can type:
`chrome://on-device-internals`
This page shows whether the AI model is present and how much storage it uses.
Removal depends on browser settings:
However, deleting the folder alone is not always permanent, as Chrome may re-download the model unless the feature itself is disabled.
Plasma, stablecoin, research report, stablecoin chain, Tiger Research: How Plasma becomes the Chrome of stablecoin infrastructure Golden Finance, removing barriers to stablecoins through free transfers and instant settlement.
JinseFinancePerplexity AI has made a $34.5 billion offer to buy Google’s Chrome browser as Google faces possible antitrust action in the US. Google has not responded, and many believe Chrome is worth far more than the bid.
AnaisWallet, KOL, what are the ways to find the wallet address of KOL? Attached is a file of hundreds of KOL addresses. Golden Finance, you can't blindly believe the address of KOL, you have to choose the one that suits you.
JinseFinanceThe Celestia community’s roadmap has one core goal: to continually scale to 1 GB blocks, bringing a significant increase in data throughput to Celestia’s rollup ecosystem.
JinseFinanceBinance faces scrutiny over response to Chrome extension attack, resulting in substantial user losses. Debates ensue over compensation and user responsibility amidst concerns about platform security and communication.
Huang BoThe SlowMist security team reminds users to thoroughly review browser extensions before installation.
SlowMistThis article shares with you how Reth plans to achieve 1GB gas throughput per second on L2 in 2024, and the long-term roadmap for Reth to exceed this goal.
JinseFinanceBinance's new CEO, Richard Teng, maintains secrecy over the company's headquarters. Despite past controversies and ties to China, the firm faces increased scrutiny and regulatory agreements, with the former CEO pleading guilty to charges. The undisclosed global base and ongoing compliance efforts shape Binance's complex narrative.
Cheng YuanXRP community around lawyer Frederick Rispoli has brought a class action lawsuit against Coinbase and its CEO Brian Armstrong.
Bitcoinist