Privacy Policy — Incognito Toolkit

Last updated: September 3, 2026

Incognito Toolkit ("the extension") is a browser privacy and security tool. This policy explains exactly what data the extension handles. In short: the extension does not collect, sell, or transmit your personal data.

1. Data we collect

None. The extension has no servers, no analytics, and no telemetry. We do not receive, store, or transmit any information about you, your accounts, or your browsing.

2. Data stored on your device

Your feature on/off settings are saved locally in your browser using the chrome.storage.local API. This data never leaves your device and is not accessible to us or any third party.

3. Access to website content

To provide its features, the extension reads page content locally in your browser — for example, to detect a fake Facebook login page (anti-phishing), to hide "Suggested"/"Sponsored" posts, or to block "seen"/"typing" signals on Facebook, Messenger, and Instagram. This processing happens entirely on your device. No page content is ever sent anywhere.

4. Network blocking & block lists

The extension blocks connections to known tracker, advertising, and malicious domains using the browser's declarativeNetRequest API. When you enable an optional list ("crypto-mining & scam domains" or "pop-up ads"), the extension downloads that public block list once per day from its official source on GitHub (raw.githubusercontent.com) to keep protection current. These are one-way downloads of domain data only. No information about you is sent as part of the request.

5. Permissions and why they are used

• storage — save your settings locally.
• declarativeNetRequest — block tracker/ad/malicious domains via browser network rules.
• alarms — schedule the once-a-day block-list update.
• Host access to websites — required to neutralize trackers and to detect fake Facebook login pages on the sites you visit. Processing is local only.
• Access to raw.githubusercontent.com — download the daily block lists.

The extension does not download or execute any remote code. It only downloads filter-list data (lists of domains) which the browser converts into network rules.

6. Data sharing and selling

We do not sell, rent, or share any data, because we do not collect any.

7. Children's privacy

The extension does not collect data from anyone, including children.

8. Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.

9. Contact

Questions? Contact: hypnguyen1209@gmail.com