PRIVACY POLICY FOR LOCKSY

Last Updated: December 13, 2025
Version: 1.0.8

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

OVERVIEW

Locksy is committed to protecting your privacy. This extension operates ENTIRELY OFFLINE with ZERO data collection, tracking, or external transmission. All data is stored locally on your device only.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA COLLECTION AND STORAGE

What We Collect (Locally Only):

1. Master Password Hash
   • Hashed using SHA-256 + unique salt
   • Plain text password is NEVER stored
   • Stored in browser.storage.local API
   • Used only for tab authentication
2. Locked Tab Information
   • Tab IDs of currently locked tabs
   • Stored temporarily in local storage
   • Automatically cleared when tabs are unlocked or closed
3. Extension Settings
   • Domain auto-lock preferences
   • Extension active/inactive state
   • Keyboard shortcut preferences
4. Authentication Session Data
   • Failed login attempt counter (security feature)
   • Temporary session authentication status
   • Automatically expires after inactivity

What We DO NOT Collect:

✗ Browsing history
✗ Website URLs you visit
✗ Website content or form data
✗ Personal information (name, email, etc.)
✗ Payment information
✗ Cookies or tracking data
✗ Analytics or usage statistics
✗ Device information
✗ Location data
✗ IP addresses

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

HOW WE USE YOUR DATA

All data is used exclusively for:

• Verifying your password when unlocking tabs
• Maintaining the list of locked tabs
• Implementing security features (brute-force protection)
• Storing your extension preferences
• Providing domain-based auto-lock functionality

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA STORAGE AND SECURITY

100% Local Storage:

✓ All data stored locally on your device using browser.storage.local
✓ NO cloud storage or external servers
✓ NO third-party services, analytics, or tracking
✓ Extension works entirely OFFLINE
✓ No network requests are made

Security Measures:

• SHA-256 + Salt encryption for passwords
• No plain text password storage
• Brute-force protection with automatic lockout
• Session timeouts for added security
• Protected by Firefox's secure storage model

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

PERMISSIONS EXPLANATION

storage:
• Purpose: Store hashed password and settings locally
• Data Access: Local device storage only
• Network: No data transmission

tabs:
• Purpose: Identify and manage tabs you choose to lock
• Data Access: Tab IDs and metadata only
• Content: Does NOT read webpage content

scripting:
• Purpose: Inject lock screen overlay on locked tabs
• Data Access: Visual overlay only, no content access
• User-Initiated: Only when you explicitly lock a tab

activeTab:
• Purpose: Lock the currently active tab
• Data Access: Current tab identifier only
• Content: Does NOT access page content or history

notifications:
• Purpose: Display lock/unlock confirmation messages
• Data Access: None
• Privacy: No data collected

webNavigation:
• Purpose: Detect navigation to maintain lock state
• Data Access: Navigation events for locked tabs only
• Security: Prevents bypass through page refresh

host_permissions (<all_urls>):
• Purpose: Allow locking any tab you choose
• Limitation: Only activates on tabs you explicitly lock
• Important: Extension does NOT automatically monitor all tabs

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA SHARING AND THIRD PARTIES

NO DATA SHARING:

✓ We do NOT sell your data
✓ We do NOT share data with third parties
✓ We do NOT transmit data over the internet
✓ We do NOT use analytics or tracking services
✓ We do NOT have access to your data (it stays on your device)

NO EXTERNAL SERVICES:

The extension operates entirely locally and does NOT:
• Connect to external servers
• Send telemetry or usage data
• Use third-party APIs
• Include tracking pixels or beacons
• Integrate with analytics platforms

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA RETENTION AND DELETION

How Long We Keep Your Data:

• Password Hash: Until you change or delete it manually
• Extension Settings: Until you uninstall the extension
• Locked Tab Info: Automatically cleared when tabs close/unlock
• Session Data: Expires after 10 minutes of inactivity

How to Delete Your Data:

Option 1 - Uninstall Extension:
1. Click Add-ons menu in Firefox
2. Find "Locksy"
3. Click "Remove"
4. All data is automatically deleted

Option 2 - Clear Extension Storage:
1. Go to about:addons
2. Find "Locksy"
3. Go to Permissions/Storage
4. Clear stored data

Option 3 - Clear Firefox Data:
1. Settings > Privacy & Security
2. Clear Data > Cookies and Site Data
3. Select "All time"
4. Clear data

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

USER RIGHTS

You have complete control:

• Right to Access: View all stored data via browser DevTools
• Right to Delete: Delete all data by uninstalling
• Right to Control: Choose which tabs to lock and when
• Right to Export: Data is locally accessible to you
• Right to Opt-Out: Disable or uninstall anytime

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

COMPLIANCE

GDPR (European Union):
✓ Processes data locally only (no cross-border transfer)
✓ Collects minimal data necessary for functionality
✓ Provides transparent information about data use
✓ Allows easy data deletion
✓ No automated decision-making

CCPA (California):
✓ Does not sell personal information
✓ Does not share personal information with third parties
✓ Allows data deletion (via uninstall)
✓ Transparent disclosure of data practices

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CHILDREN'S PRIVACY

This extension does not knowingly collect data from children under 13. No personal information is collected from any user, regardless of age.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

OPEN SOURCE

This extension is open source and transparent:
• GitHub Repository: https://github.com/vansh-121/Locksy
• You can review all source code
• Verify our privacy claims
• Report issues or contribute

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CONTACT

For privacy questions or concerns:
• GitHub Issues: https://github.com/vansh-121/Locksy/issues
• Developer: vansh-121

For security vulnerabilities:
• Report via GitHub Security Advisories
• Do not disclose publicly until patched

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

BOTTOM LINE

✓ Your data stays on your device
✓ Your password is hashed, never stored in plain text
✓ No tracking, analytics, or third-party services
✓ You control your data completely
✓ Delete everything by uninstalling
✓ We built this to PROTECT your privacy, not invade it

By installing and using Locksy, you acknowledge that you have read and understood this Privacy Policy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Full privacy policy available at:
https://www.locksy.dev/privacy-policy