Privacy Policy

Who we are

Privacy Shield is a free browser extension built by an independent developer (anonymous_ghost). The project has no company behind it, no investors, and no advertising revenue.

What the extension does NOT collect

• Your browsing history
• Which websites you visit
• Your IP address
• Any personally identifiable information
• What you type on any website
• Any data from pages you visit

What happens on your device

Almost everything Privacy Shield does happens locally on your device:

• The 89-site pre-analysed database is bundled inside the extension — no network request is made for these sites
• Your extension settings (toggles) are saved in chrome.storage.sync — this syncs across your Chrome devices but is not accessible to us
• The list of sites you have already seen the privacy toast for is stored in chrome.storage.local — only on your device

Network requests the extension makes

Privacy Shield makes the following outbound requests, only when needed:

• HaveIBeenPwned (haveibeenpwned.com) — checks if the current site has been in a data breach. Only the domain name is sent (e.g. "facebook.com"). No personal data.
• XposedOrNot (api.xposedornot.com) — same as above, domain name only.
• The website's own privacy policy page — fetched to extract and analyse the policy text. This is the same request your browser would make if you clicked the privacy policy link yourself.
• Formspree (formspree.io) — only if you submit feedback via the Feedback tab. Your message and optional email are sent. Nothing else.

Community website (privacyshield.dpdns.org)

If you choose to create an account on our website, we collect:

• Your name and email address — used to identify your account
• Your age group and occupation — used for anonymised research only
• Browsing time data (domain names + seconds) — only if you opt in, only aggregated totals are ever published

Your name and email are stored separately from any browsing data. A random UUID links them. We never publish individual records — only aggregated community totals.

You can opt out of tracking anytime from the extension popup. You can request deletion of your account by emailing us.

Third-party services

• Supabase — used to store community website account data. Hosted in Seoul (ap-northeast-2). Supabase Privacy Policy
• Netlify — hosts this website. Netlify Privacy Policy
• Formspree — handles feedback form submissions. Formspree Privacy Policy

Children

Privacy Shield does not knowingly collect data from users under 18. Our community website signup blocks accounts for users who select "Under 18" as their age group.

Changes to this policy

If we make significant changes, we will update the date at the top of this page. Continued use of the extension after changes means you accept the updated policy.

Contact

Questions or data deletion requests: use the Feedback tab in the extension, or reach us at ko-fi.com/anonymous_ghost