This privacy policy explains what information is collected by the Login Defense browser extension, how it is used, and the rights available to you under GDPR (EU/EEA), UK GDPR, and CCPA/CPRA (California).

Information We Collect
The extension collects only the following information, submitted by the user when requesting access to a login page:

Email address – to identify the user submitting the access request.
Requested login website – to verify the legitimacy of the access request.
We do not collect: passwords, financial information, precise geolocation, or any other personal data unrelated to login verification.

How We Use Your Data
Your data is used only to:

Review and approve/deny access requests.
Maintain the trusted login domain list within the extension.
Communicate with you about the extension if needed.
We do not sell or share your data with third parties for marketing purposes.

Legal Bases for Processing (GDPR/UK GDPR)
We process your personal data on the following legal bases:

Consent – when you submit your email and request.
Legitimate Interest – to provide security and anti-phishing protection.
Legal Obligations – if required to comply with law enforcement or regulatory requirements.
Data Retention
We retain personal data only as long as necessary to provide the service or as required by law. When data is no longer needed, it is securely deleted.

Data Security
All data transmitted to the backend is encrypted in transit (TLS/SSL). Access to stored data is restricted to authorized personnel only.

Your Privacy Rights
Depending on your location, you have the following rights:

Access – Request a copy of the data we hold about you.
Correction – Request correction of inaccurate data.
Deletion – Request deletion of your data (“right to be forgotten”).
Restriction – Request that we limit processing of your data.
Portability – Request your data in a portable format (GDPR only).
Do Not Sell/Share – California residents may opt-out of any sale or sharing of personal data (we do not sell).
Non-Discrimination – You will not face discrimination for exercising your privacy rights.
To exercise your rights, contact us at support@logindefense.com. We will verify your identity before fulfilling any request.

Children’s Privacy
Our extension is not directed to children under 16. We do not knowingly collect data from children. If we learn we have unintentionally collected such data, we will delete it promptly.

Policy Updates
We may update this privacy policy from time to time. Updates will be posted on this page with a revised “Last Updated” date.

📫 Contact Us
Login Defense
support@logindefense.com
Please include “Privacy Request” in the subject line for GDPR/CCPA requests.