Privacy Policy

Last updated: August 2026

Our Commitment

PhishClean is built on a simple principle: your browsing data stays on your device. We never see, collect, or transmit your passwords, URLs, page content, or browsing history.

What Stays on Your Device

• All page analysis and phishing detection (17 signals)
• Secret and API key scanning
• URL and token scanning
• Risk scoring and alert decisions
• Trusted domain list and preferences
• Blocked threat statistics

What We Collect

The only data that touches our server:

• Install ID — A randomly generated UUID created on first install to identify this extension install.
• Account email — Used for sign-in, account recovery, and billing-related support.
• License status — Whether this install is in an active trial or has an active paid plan.
• Extension version — The version string from the extension manifest, so we can tell whether an install is up to date.
• Last check-in time — The date and time of the most recent license check, and a count of how many license checks this install has made. The extension checks its license about every six hours; we now keep the timestamp of that request so we can tell how many installs are still running.
• Browser family — Recorded as one of "chrome", "firefox", "edge", or "other", determined on our server from the User-Agent header your browser sends with every request. The extension does not send this; nothing extra leaves your device for it.
• Uninstall event — When you remove the extension, your browser opens a page on our site with your install ID attached, and we mark that install as removed. Nothing else is sent, and it contains no information about your browsing.

That's it from the extension. No browsing history. No URLs. No domains. No passwords. No page content. No record of what the extension detected or where.

What the Extension Never Sends

There is no code path in the extension that transmits a URL, a domain name, page content, form input, or a detection result. Detection runs entirely in your browser and its output stays there. The extension makes network requests to exactly four endpoints — license registration, license status, sign-in, and the billing portal — and you can verify this yourself by unpacking the extension and searching for network calls; the source is published for that purpose.

Analytics on This Website

Our website — separately from the extension — uses Vercel Analytics, Google Analytics, and Microsoft Clarity to measure page visits and, in Clarity's case, to record anonymised interaction sessions on the website itself. These run on phishclean.com pages only. They are not part of the extension, they cannot see anything the extension does, and they have no access to the pages you visit elsewhere.

Contact and Affiliate Forms

If you use the contact form or affiliate application form on our website, we collect the name, email, and details you provide. This data is used solely to respond to your inquiry, review affiliate applications, and manage partner communications. It is not sold to third parties.

Payment Processing

Payments are processed by Dodo Payments. We do not store credit card numbers. Your payment is linked to your install ID and account so paid protection can activate on the correct extension install.

Data Retention

License records are retained as long as the extension is installed. Contact messages are retained for support purposes. You can request deletion at any time by contacting us.

GDPR & International Users

We collect limited account and billing data only: install ID, account email, license status, extension version, license check-in times, browser family, uninstall events, and support messages you choose to send. We process these to operate and enforce your licence and to keep the service working — we do not use them to build a profile of you, and we do not sell or share them. EU users retain full rights under GDPR including data access, rectification, and deletion. Contact us at the address below to exercise these rights.

Changes

We may update this policy as needed. Significant changes will be noted on this page with an updated date.

Contact

For privacy questions or data deletion requests, use the contact form on our website.