Privacy Policy

Last updated: May 2026

Overview

Secret Guard is a privacy-focused Chrome extension that provides a PIN-locked private bookmark vault, incognito tab recovery, and optional history cleanup. It works in both regular and incognito Chrome windows. We are committed to protecting your privacy. This policy explains what data we collect and how we handle it.

Data Storage

All extension data is stored locally on your device using Chrome's built-in storage APIs:

Session storage (default): Closed tab history and bookmarks are cleared when the browser session ends — for incognito, this means when all incognito windows close.
Local storage (opt-in): If you enable "Persist Bookmarks," data is stored in your browser's local storage and survives browser restarts.

We do not operate any servers that store your browsing data, bookmarks, or tab history.

Data We Do NOT Collect

Browsing history or URLs you visit
Bookmark content or metadata
Personal information (name, email, address)
Usage analytics or telemetry
Cookies or tracking identifiers

Pro License (Optional)

If you purchase a Pro license, the following data is processed:

Email address: Stored on our license server to associate with your purchase. Provided by Lemon Squeezy (our payment partner).
License key: Generated by Lemon Squeezy and stored on our server for activation/verification.
Device ID: A randomly generated UUID stored locally on your device and sent to our server during license activation to enforce single-device licensing.

The license server (secretguard.app) only handles license verification. It never receives or stores your browsing data.

Third-Party Services

Lemon Squeezy: Processes Pro license payments. Subject to Lemon Squeezy's privacy policy.
Cloudflare: Hosts our license server. Subject to Cloudflare's privacy policy.

Permissions

Secret Guard requests the following Chrome permissions:

tabs: To track and restore closed tabs (works in both regular and incognito windows).
bookmarks: To detect bookmarks created in incognito and offer to move them into your private vault.
storage: To store settings, bookmarks, and PIN data locally.
alarms: For auto-lock timeout functionality and Cleanup Mode flush triggers.
history (optional): Requested only when you enable Cleanup Mode (Pro). Used to delete browsing-history entries for URLs visited inside a private space. Not requested otherwise.
https://secretguard.app/* (host permission): For Pro license activation and verification only. No browsing data is sent.

Security

PIN is hashed using PBKDF2 with 100,000 iterations and never stored in plain text.
Content Security Policy restricts script execution to the extension itself.
In incognito windows the extension uses Chrome's split mode, running in a separate context isolated from regular browsing.

Children's Privacy

Secret Guard is not directed at children under 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy, contact us at support@secretguard.app.