Security & Data

What actually happens with your data, not just what a policy says.

What stays on your device

  • Your birthdate, lifespan estimate, and every preference are saved with chrome.storage.local — a storage box that belongs to your browser, on your machine. We don't run a server that receives it.
  • No analytics, no ad network, no tracking script of any kind, anywhere in the extension.
  • Incognito windows keep a fully separate copy of your settings (Chrome's "split" mode) — nothing you set in a normal window carries into incognito, or back.
  • The extension requests exactly two permissions: storage (to save your settings) and commands (for the optional keyboard shortcut). Nothing that reads your browsing history, open tabs, or network traffic.
  • Every extension page runs under a Content Security Policy that only allows loading resources from itself and two explicitly named font/icon providers — nothing else can load, by design, not just by promise.

The one exception

If you submit the Feedback form, what you type is sent to Formspree — a third-party form processor — so it can be delivered to us as an email. That's the only place any typed input ever leaves your device, and only when you choose to submit it.

Still being closed

Every page currently loads the IBM Plex Mono font from Google Fonts and its icons from Cloudflare's CDN. That means those two services see a request each time you open a new tab — no personal data is in that request, but it's still an external call this project's own "fully local" claim should not have to make an exception for. Self-hosting both is on the roadmap to close this gap for good.

Found a vulnerability?

Report it responsibly to admin@aroice.in. This site also publishes a standard security.txt for automated disclosure tooling.

This page explains practice. For the legal policy, see the Privacy Policy.

Back to Home