# Built because your browser shouldn't spy on you to protect you.

> PhishClean was built on a simple belief: your browser should protect you, not report on you. The story behind 100% local, privacy-first phishing detection.

Canonical: https://www.phishclean.com/about
Last updated: 2026-09-21

Our story

Most phishing protection tools make a silent trade-off — they protect you by watching you. PhishClean was built to break that trade-off.

## The gap nobody was filling

There was no browser extension that offered serious, multi-layered phishing and token leak detection — without sending a single byte of your browsing data to a server.

### The problem with "protection"

Most phishing protection tools make a silent trade-off — **they protect you by watching you.** They send your browsing data to the cloud, make remote lookups on every URL you visit, and build profiles of your behavior. You're trading one privacy risk for another.

That's the gap PhishClean was built to fill.

There was no browser extension that offered serious, multi-layered phishing and token leak detection — domain mismatches, JWT exposure, API key leaks, hidden iframes, HTTPS downgrades — without sending a single byte of your browsing data to a server. Everything else either:

- Only did basic URL blacklist checks (cloud-dependent), or
- Offered deep detection but at the cost of your privacy

### The founding principle

PhishClean was built on a simple belief: **your browser should protect you, not report on you.**

All detection runs locally on your device — no cloud lookups, no passwords transmitted, no page content uploaded, and no record of what was detected or where. We only collect the account and licensing information needed to activate and manage your subscription: your install ID, account email, license state, extension version, license check-in times, browser family, and uninstall events.

### 100% local. 100% private. Zero compromise on security.

That's the founding principle — and it hasn't changed. Every detection signal, every scan, every alert runs entirely inside your browser. Your data stays yours.

Privacy promise

Zero browsing data collected. Ever.

### Stays on your device

- All page analysis and scoring
- Phishing detection heuristics
- Secret and API key scanning
- URL and token scanning
- Whitelist and preferences
- Alert history

### Touches our server

- Install ID (UUID)
- Account email and license status (trial/paid)
- Extension version number
- Nothing else. Ever.

What we believe

The principles behind PhishClean

🔒

### Privacy is non-negotiable

Your browsing behavior is your own. Security tools that phone home with your data aren't protecting you — they're profiling you.

⚡

### Detection should be real-time

Blocklists catch threats hours after the fact. PhishClean analyzes every page as it loads — catching zero-day phishing pages that no blocklist has seen yet.

🎯

### Depth over simplicity

Basic URL checks aren't enough. PhishClean runs 27 detection signals — form actions, JWT leaks, API keys, hidden iframes, HTTPS downgrades — because attackers don't stop at one trick.

🆓

### Core protection should be free

The most important defenses — phishing detection, domain mismatch alerts, link safety tooltips — are free forever. Privacy shouldn't be a premium feature.

Who builds it

The PhishClean team

P

### PhishClean Research Team

Browser Security · Chennai, India

PhishClean is built by a small team focused on browser-layer security research. We analyze real phishing campaigns, study credential theft techniques, and turn those findings into detection signals that run entirely on your device.

## See it in action

Install PhishClean and all 27 checks run for 7 days — no account needed. Your passwords, page content, and browsing history are never sent to us.

[Install on Chrome](https://chromewebstore.google.com/detail/phishclean/kloceclooedmphmnnpgoekolaggejgca) [Install on Firefox](https://addons.mozilla.org/en-US/firefox/addon/phishclean/) [Install on Edge](https://microsoftedge.microsoft.com/addons/detail/phishclean/jeilenifcaoenlglebpmmphbfmbfkgbj)

Last updated: 21 September 2026