SessionShield Privacy Policy

Last updated: July 26, 2026

SessionShield (“the Extension”) is a Chrome browser extension that helps protect browser login sessions from theft, phishing lookalike sites, and over-privileged extensions.

1. Summary

SessionShield is designed to keep your data on your device. We do not operate a SessionShield account system, and the Extension does not upload your browsing history, passwords, or cookie values to SessionShield servers.

2. Data the Extension accesses on your device

To provide protection features, the Extension may locally access:

• Cookie metadata (such as cookie names and domains) to identify login-related sessions and to perform emergency sign-out. Cookie values are not displayed, stored for later use, or transmitted by SessionShield.
• Installed extension information (names and declared permissions) to warn about high-risk permission combinations.
• Page signals such as website hostnames and coarse suspicious-activity indicators (for example, that a lookalike domain was detected). These are used for local alerts only.
• Settings and local alert history stored in Chrome’s extension storage on your device.

3. Data we do not collect

• We do not sell personal information.
• We do not use analytics SDKs or advertising trackers in the Extension.
• We do not transmit passwords, cookie values, or full page contents to our servers.
• We do not require you to create an account to use SessionShield.

4. Optional Windows native helper

An optional local Native Messaging helper (Windows) may be installed separately to detect certain remote-debugging techniques used in login theft. Communication is local between the Extension and the helper on your computer. It does not send browsing data to SessionShield over the internet.

5. Permissions

SessionShield requests browser permissions only as needed for its single purpose: protecting login sessions and warning about phishing / risky extensions. Detailed justifications are provided in the Chrome Web Store listing Privacy section.

6. Children’s privacy

SessionShield is not directed at children under 13, and we do not knowingly collect personal information from children.

7. Changes

We may update this policy as the Extension evolves. The “Last updated” date at the top will change when we do. Continued use after updates means you accept the revised policy.

8. Contact

For privacy questions about SessionShield, open an issue on the project repository where you obtained SessionShield, or contact the publisher email listed on the Chrome Web Store item page.

9. Limited Use

SessionShield’s use of any user data accessible through Chrome APIs is limited to providing and improving the Extension’s disclosed single purpose of login-session protection and user safety alerts. Data is not sold, and is not used for unrelated advertising or credit decisions.