Legal
nullGravitum Guard — Privacy Policy
Last updated: September 6, 2026
What the extension collects
When you run a scan, the extension sends to nullGravitum: the current tab URL, a random device id stored in browser sync storage, and passive page signals (whether the page is HTTPS, mixed-content hints, presence of password/login fields). It does not read password values, form field contents, cookies, or browsing history beyond the active tab you choose to scan.
How we use it
We compute a public risk score/summary for the user. Separately, our servers may enrich the domain with defensive discovery and breach-corpus lookups. Enrichment results are stored for authorized nullGravitum operators and are not shown inside the extension UI.
Data stored in the browser
API base URL, optional public extension token, and a generated device id via chrome.storage.sync. No breach passwords or API secrets for third-party intel services are stored in the extension.
Sharing
We do not sell personal data. Processors (hosting, email, payment for the main product) may process operational logs under our agreements. Contact us to request deletion of extension scan rows associated with your account or device id when feasible.