XSS Guard — Privacy Policy

Last updated: February 15, 2026

Overview

XSS Guard is a browser extension that protects users from cross-site scripting (XSS) attacks. Your privacy is important to us — this extension is designed to work entirely offline with zero data collection.

Data Collection

XSS Guard does not collect, store, or transmit any personal data to external servers.

All threat detection data is stored locally on your device using Chrome’s built-in storage (chrome.storage.local) and never leaves your browser.

What We Don’t Do

• ❌ No personal information is collected
• ❌ No browsing history is tracked
• ❌ No analytics or telemetry
• ❌ No third-party services or SDKs
• ❌ No network requests to external servers
• ❌ No cookies or tracking pixels
• ❌ No data sharing or selling

What Is Stored Locally

The following data is stored only on your device and is never transmitted:

• Threat logs — Records of blocked XSS attacks (domain, type, severity, timestamp)
• Whitelist — Domains you’ve chosen to trust
• Settings — Your extension preferences (protection on/off, notifications)