Chrome Extension Privacy Policy

ScamSandbox Chrome Extension provides real-time protection against phishing, scams, and malicious websites by analyzing the sites you visit and warning you about potential threats.

• ✓ Real-time threat detection when you browse
• ✓ Instant security alerts for dangerous sites
• ✓ On-demand deep security analysis
• ✓ Community-driven threat intelligence

When You Browse (Automatic Protection)

• •
  Current Page URL:

  We check the URL of pages you visit against our threat database. This check happens locally first, then queries our API only for suspicious patterns. URLs are not logged or stored on our servers.

• •
  Page Content Analysis:

  We analyze page elements locally in your browser to detect phishing attempts, fake login forms, and scam patterns. This analysis happens entirely on your device.

When You Request a Scan (Manual Action)

• •
  Domain Information:

  When you click "Analyze This Page", we send the domain to our API for comprehensive security analysis. This creates a scan record on our servers tied to the domain, not to you personally.

• •
  Threat Reports:

  Generated reports include security findings, risk scores, and recommendations. Reports are associated with domains, not individual users.

Stored Locally on Your Device

• •
  Your Settings:

  Protection level preferences, notification settings, and whitelisted domains are stored locally using Chrome's storage API. Never sent to our servers.

• •
  Cached Threat Data:

  Recent threat checks are cached locally to improve performance and reduce server requests. Cache is automatically cleared after 24 hours.

• ✗ No Browsing History: We do not track, store, or have access to your browsing history
• ✗ No Personal Profiles: We do not create user profiles or track individual users
• ✗ No Data Sale: We never sell, rent, or share your data with third parties
• ✗ No Ads or Tracking: We don't inject ads or use tracking pixels
• ✗ No Passwords or Personal Info: We don't access form data, passwords, or personal information
• ✗ No Background Mining: We don't use your device for cryptocurrency mining or similar activities

Our extension requests only the minimum permissions necessary:

With Our API (scamsandbox.com)

• • Domain names for security analysis (only when you request a scan)
• • Suspicious URL patterns for threat verification
• • Community threat reports (if you choose to submit one)

Never Shared

• ✗ Your identity or personal information
• ✗ Your complete browsing history
• ✗ Data with advertisers or data brokers
• ✗ Information with other extensions or websites

You Can Always:

• ✓
  Disable Real-time Protection:

  Turn off automatic threat detection while keeping manual scan capability

• ✓
  Whitelist Trusted Sites:

  Exclude specific domains from security checks

• ✓
  Clear Local Data:

  Remove all cached data and settings from the extension

• ✓
  Uninstall Anytime:

  Remove the extension and all associated local data instantly

• ✓
  Request Data Deletion:

  Contact us to remove any domain scan records from our servers

• 🔒 Encrypted Communications: All API requests use HTTPS/TLS encryption
• 🔒 Local Processing: Threat detection happens on your device when possible
• 🔒 No User Tracking: We don't use identifiers to track users across sessions
• 🔒 Regular Security Audits: Extension code is regularly reviewed for vulnerabilities
• 🔒 Open Communication: Security issues can be reported to security@scamsandbox.com