Wardseal Privacy Policy
What Wardseal does
Wardseal is a browser extension that warns you about scam websites, links and messages, and lets you encrypt messages you type.
What stays on your device
Wardseal reads the address and visible text of the pages you open, and the messages you view, only to check them for scam signs. This analysis happens on your computer. Wardseal does not upload, sell, share or store this content on any server. We do not run servers that receive your data, and we do not collect your browsing history.
What is saved on your device
Your settings and language, the downloaded lists of known phishing addresses, and your quiz progress are saved in your browser's extension storage. A passphrase you enter to unlock a message is held in session storage and removed when you close the browser. Wardseal cannot recover a passphrase or decrypt a message for you. For bank account numbers seen in chats, Wardseal keeps only a scrambled fingerprint and the last four digits on your computer, to warn you if someone sends a different account number than before.
Passwords, card numbers and short-lived notes
If you turn on the password check, Wardseal tests a password you type for weakness on your device. The password itself is never stored or sent. To remind you to change a weak password, Wardseal keeps only a scrambled fingerprint of the website's name and the reason it was weak. It does not look at card numbers except to warn you before you type one on a risky page, and it does not store them.
When a message is flagged as a scam, Wardseal keeps a short note in browser memory only. It is never written to disk and disappears when you close the browser. The note holds the time, the app, the sender's name or number as shown in the chat, the warning codes, and, for any account number in that chat, only the last four digits and a scrambled fingerprint. It contains no message text. It is used only to ask whether you want to pause before sending money.
Downloads
Wardseal downloads public lists of known phishing and malware addresses from OpenPhish (openphish.com), URLhaus (urlhaus.abuse.ch) and Phishing Army (phishing.army). These requests do not include information about you or the pages you visit, although those services will see your IP address, as with any download.
No cloud AI, no accounts, no ads
Wardseal does not send your messages or the pages you visit to any AI service or to any other service. It has no accounts, no ads and no tracking.
What we do not do
We do not sell or transfer your data to third parties, use it for advertising, or use it to decide credit or lending. We do not use or transfer user data except to provide the single purpose above, in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Warnings are not guarantees
Wardseal can miss scams and can sometimes warn about safe pages. Do not rely on it as your only protection. If you are unsure, contact the company or person using a number you already trust.
Children
Wardseal is not directed at children under 13 and does not knowingly collect their data.
Changes
If this policy changes, we will update the date above and the version notes in the store listing.