Privacy Policy

Overview

PolicyLens ("the extension", "we", "us") is a browser extension developed by NOCTARX that helps users understand and analyze privacy policies and terms of service. This Privacy Policy explains how PolicyLens handles information when you use it.

Short version: PolicyLens does not collect, store, transmit, or sell any personal information about you. Everything the extension does happens locally on your device.

What We Collect

PolicyLens collects nothing about you personally. Specifically, we do not collect:

• Your name, email address, or any account information
• Your browsing history or the websites you visit
• The content of privacy policies you analyze
• Your IP address or location
• Device identifiers or fingerprints
• Usage patterns or how you interact with the extension
• Any other personal or sensitive information

External Service Calls

PolicyLens makes requests to a small number of external services to provide its features. These are described fully below:

1. Policy page fetching (Auto Scan)

When Auto Policy Scan is enabled, the extension fetches the privacy policy and terms pages of sites you visit to analyze them. These requests go directly from your browser to the target website — no data passes through our servers. The request includes only standard browser headers (User-Agent, Accept-Language).

2. ToS;DR API

For sites in the Terms of Service; Didn't Read database, the extension queries api.tosdr.org with only the domain name (e.g., "google.com"). No personal information is included. ToS;DR's privacy policy applies to their service: tosdr.org.

3. HaveIBeenPwned (Email Breach Checker)

The Email Breach Checker uses k-anonymity: your email is SHA-1 hashed, and only the first 5 characters of the hash are sent to api.pwnedpasswords.com. Your full email address is never transmitted. Results are cached locally for 1 hour. HaveIBeenPwned's privacy policy applies: haveibeenpwned.com/Privacy.

4. Google Translate (Multilingual policies)

When a policy page is detected as non-English, the extension may send a text sample (up to 3,000 characters of policy text) to Google's free translation endpoint for analysis. This is policy text only — no personal information about you. Google's Privacy Policy applies: policies.google.com/privacy.

Browser Permissions

PolicyLens requests the following Chrome permissions and uses them as described:

• activeTab — Read the current tab's URL and content to detect policy links and analyze pages.
• scripting — Inject the content script to extract text from policy pages opened in background tabs during Auto Scan.
• storage — Save your settings, analysis history, and cached results locally on your device.
• tabs — Open background tabs to fetch policy pages for Auto Scan, and detect tab navigation for score restoration.
• notifications — Show optional desktop notifications when cookie banners are detected (off by default).
• clipboardWrite — Copy the analysis report to your clipboard when you click "Copy Report".
• windows — Open the extension popup as a standalone window when the "Full Report" button is clicked on a page with overlapping elements.
• host_permissions (<all_urls>) — Fetch privacy policy pages from any website for analysis. Required because privacy policies are hosted on any domain.

Local Data Storage

PolicyLens stores the following data locally on your device using chrome.storage.local:

• Settings — Your preferences (auto-scan on/off, notifications on/off, etc.)
• Policy History — Domain names, scores, grades, and finding labels from your past analyses (up to 50 sites)
• Cached Scores — Privacy scores for domains you've analyzed, stored for up to 30 days
• Policy Hashes — 16-character SHA-256 hashes of policy text to detect changes (no policy content stored)
• Breach Check Cache — Results of email breach checks, cached for 1 hour
• Scan Timestamps — Timestamps of last auto-scan per domain to enforce the 24-hour debounce

All of this data remains entirely on your device. You can clear it at any time via Settings → Policy History → Clear All, or by removing the extension.

Third-Party Services & Advertising

PolicyLens contains no advertising, no analytics, no telemetry, and no third-party tracking scripts. We do not partner with advertising networks. We do not sell, rent, or share any data with third parties for commercial purposes.

The extension's source code is available for review at github.com/NOCTARX-projects.

Children's Privacy

PolicyLens is a general-purpose browser extension not directed at children. We do not knowingly collect any information from children under the age of 13. Since we collect no personal information from any user, this applies equally to all age groups.

Changes to This Policy

If we make material changes to this Privacy Policy, we will update the "Last updated" date at the top of this page and note changes in the extension's changelog. Continued use of the extension after changes constitutes acceptance of the revised policy.

Given that we collect no personal data, material changes are unlikely to affect your privacy in any meaningful way.

Your Rights

Since PolicyLens collects no personal information about you, there is no personal data for us to provide, correct, or delete on your behalf. All data the extension stores is on your own device and under your full control:

• Clear history via Settings → Policy History → Clear All
• Remove all extension data by uninstalling PolicyLens from Chrome
• Disable any feature (auto-scan, notifications, history) independently in Settings