Privacy Policy
Last updated: June 2026
Overview
SecuredRelay is a browser extension that helps users generate and manage privacy email aliases. This privacy policy explains what data the extension collects, how it is used, and how it is protected.
Data Collection
The extension collects only the following data:
- Authentication credentials: Username and password, provided voluntarily by the user during login or registration. These are transmitted securely to our backend API and are not stored by the extension beyond the active session token.
- API token: A session token issued after successful login, stored locally in the browser's extension storage to maintain the user's session across browser restarts.
- User preferences: The user's selected domain and form input values (such as custom alias prefix), stored locally for convenience. These are never transmitted to external servers.
What We Do Not Collect
- Browsing history
- Search queries
- Personal information beyond what the user provides during account registration
- Analytics or usage telemetry
- Cookies from third-party services
- Financial or payment information
Data Usage
All collected data is used solely for the purpose of providing the extension's core functionality:
- Authentication credentials are used to verify the user's identity with the SecuredRelay backend API.
- The API token is used to authenticate subsequent requests to the backend for creating, listing, and managing email aliases.
- User preferences are stored locally to improve the user experience within the extension.
Data Sharing
We do not sell, trade, or share any user data with third parties. Data is transmitted only to the SecuredRelay backend API server for the purpose of providing the service.
Data Storage and Security
- The API token and user preferences are stored locally in the browser's extension storage area, which is isolated from web pages and other extensions.
- All communication with the backend API is conducted over HTTPS.
- Passwords are never stored by the extension. They are transmitted once during login and are handled securely by the backend.
Data Retention
Locally stored data (API token, preferences) persists until the user logs out or uninstalls the extension. The user can clear this data at any time by logging out through the extension popup.
Permissions
| Permission | Why It's Needed |
|---|
activeTab | Detect email input fields on the current tab and inject the alias generation button |
storage | Store the authentication token and user preferences locally |
clipboardWrite | Copy generated alias addresses to the clipboard when requested by the user |
<all_urls> | Run the content script on any website to detect email input fields wherever the user browses |
Children's Privacy
The extension is not directed at children under the age of 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date.
Contact
For questions about this privacy policy, contact: [email protected]