Privacy Policy

Last updated: March 2026

Overview

Secret Guard is a Chrome extension for incognito mode. We are committed to protecting your privacy. This policy explains what data we collect and how we handle it.

Data Storage

All extension data is stored locally on your device using Chrome's built-in storage APIs:

Session storage (default): Closed tab history and bookmarks are cleared when all incognito windows close.
Local storage (opt-in): If you enable "Persist Bookmarks," data is stored in your browser's local storage and survives browser restarts.

We do not operate any servers that store your browsing data, bookmarks, or tab history.

Data We Do NOT Collect

Browsing history or URLs you visit
Bookmark content or metadata
Personal information (name, email, address)
Usage analytics or telemetry
Cookies or tracking identifiers

Pro License (Optional)

If you purchase a Pro license, the following data is processed:

Email address: Stored on our license server to associate with your purchase. Provided by Lemon Squeezy (our payment partner).
License key: Generated by Lemon Squeezy and stored on our server for activation/verification.
Device ID: A randomly generated UUID stored locally on your device and sent to our server during license activation to enforce single-device licensing.

The license server (secretguard.app) only handles license verification. It never receives or stores your browsing data.

Third-Party Services

Lemon Squeezy: Processes Pro license payments. Subject to Lemon Squeezy's privacy policy.
Cloudflare: Hosts our license server. Subject to Cloudflare's privacy policy.

Permissions

Secret Guard requests the following Chrome permissions:

tabs: To track and restore closed incognito tabs.
bookmarks: To detect bookmarks created in incognito and offer to move them.
storage: To store settings, bookmarks, and PIN data locally.
contextMenus: To add "Save to Secret Bookmarks" to the right-click menu.
alarms: For auto-lock timeout functionality.

Security

PIN is hashed using PBKDF2 with 100,000 iterations and never stored in plain text.
Content Security Policy restricts script execution to the extension itself.
The extension runs in a separate incognito context, isolated from regular browsing.

Children's Privacy

Secret Guard is not directed at children under 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy, contact us at support@secretguard.app.