Privacy Policy

Last updated: April 11, 2026

Cybersecurity Browser Extension is committed to protecting your privacy. This policy explains what data the extension accesses, how it is used, and how it is stored.

1. Data Collection

This extension does not collect, transmit, or sell any personal information. All data processing occurs locally in your browser or through secure API calls to our backend services solely for the purpose of phishing detection.

2. Data Accessed by the Extension

The extension accesses the following data to provide its functionality:

• URLs of visited pages - Scanned in real-time to detect phishing and malicious websites. URLs are sent to the prediction backend for classification and are not stored on any server.
• Page content (links) - The extension extracts hyperlinks from web pages for batch scanning. Only URLs are extracted, not page text or personal content.
• Cookies metadata - The Cookie Analyzer reads cookie attributes (name, domain, path, HttpOnly, Secure, SameSite) to assess security posture. Cookie values are not collected or transmitted.

3. Data Storage

All user data is stored locally in your browser using Chrome's built-in storage API (chrome.storage.local). This includes:

• Scan history and dashboard statistics
• User preferences and settings
• Batch scan results

No user data is stored on external servers. You can clear all stored data at any time through the extension's dashboard (Clear History button) or by removing the extension.

4. Backend Services

The extension communicates with backend services hosted on Google Cloud Run for the following purposes:

• Phishing prediction - URLs are sent to the prediction service for AI-based classification. URLs are processed in real-time and not persisted on the server.
• Cookie analysis - Website URLs may be sent to the cookie analysis service for server-side cookie metadata extraction.
• Knowledge Base - Q&A entries are stored in a managed knowledge base. This data is user-created content and does not contain personal information.

5. Third-Party Services

The extension may optionally use the Anthropic Claude API for AI-powered security reports and website auditing chat. If used, the user provides their own API key, which is stored locally in the browser. Data sent to Claude API is subject to Anthropic's Privacy Policy.

6. Permissions Justification

• activeTab - Access the current tab URL for phishing scanning
• scripting - Extract links from pages and highlight/remove phishing content
• storage - Save settings and scan history locally
• tabs - Read tab URLs and update badge indicators
• cookies - Read cookie metadata for security analysis
• webNavigation - Intercept navigation to phishing sites

7. Data Sharing

This extension does not:

• Sell or share user data with third parties
• Use data for advertising or tracking
• Collect personally identifiable information
• Transfer data to external analytics services

8. User Control

You have full control over your data:

• Clear all scan history from the dashboard at any time
• Toggle protection features on or off
• Switch between cloud and local backend modes
• Uninstall the extension to remove all stored data

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date.