Privacy Policy

At a glance

1. What we collect

Privacy Shield is published by Hassan Khalid (“we”). We collect nothing through the extension. It has no servers behind it, no accounts, and no code that sends usage statistics, identifiers or content from your browser to us or anyone else.

The extension does keep a few things on your own device so it can work:

• your settings: mode, colours, strength, spotlight shape and size, shortcuts preferences and your list of sites;
• if you use eye tracking, your calibration: a small set of numbers plus a few dozen reference eye and head measurements, with no images;
• a note that you have already allowed the camera, so setup does not ask again.

This website and email

This website does not use cookies, analytics or advertising. If you write to us, we receive your email address and your message, and we use them only to reply and to improve the extension. We do not add you to a mailing list.

2. How the camera is used

The camera is used for one thing: estimating where on the screen you are looking, for the Look-away guard and for Spotlight when it follows your eyes. Overlay mode and the cursor-following Spotlight never use it.

Each camera frame is analysed on your computer by the MediaPipe Face Landmarker model, which is bundled inside the extension and finds your face and irises. Those landmarks are turned into a screen position, and the frame is then discarded. Frames are not recorded, saved, shared or uploaded. The extension pages that handle the camera are also forbidden by the extension’s own security policy from making network requests, so they cannot send anything out even by mistake.

• The camera only starts after you choose Set up eye tracking and allow it in your browser’s permission prompt.
• It runs only while a mode that needs it is on. It is released when you turn the shield off, switch to a mode that doesn’t need it, or the browser has been in the background for a few seconds, and your camera light goes out.
• One optional feature, an alert when a second face appears, is off by default. If you turn it on, the camera stays on at a low frame rate while it is enabled, even when the shield is off, and the alert is produced entirely on your device.

3. Where data is stored

Settings and calibration are stored in your browser’s extension storage on your device. Temporary working state, such as the current eye tracking status and accuracy figures shown in the popup, lives in browser memory and clears when you close the browser.

If you switch on Sync settings, your look-and-behaviour settings are copied through your browser’s own sync service (for Chrome, your Google account), under that provider’s privacy policy. Calibration data, camera choice and the on/off state are never synced. If you export your settings to a file, you decide where that file goes; we never receive it.

Removing the extension deletes everything it stored on that device.

4. Permissions explained

The extension asks for as little as it can. Here is what each permission is for.

The extension’s security policy also allows bundled WebAssembly, which is how the eye tracking model runs locally. It does not allow remote code of any kind.

5. Third parties

We do not sell, rent, share or transfer your data, because we do not have any. Nothing is used for advertising, credit decisions or any purpose unrelated to the extension working. This is consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Two open-source components are bundled in the extension and run locally with no network access: the MediaPipe Face Landmarker by Google (Apache License 2.0) and the Archivo typeface (SIL Open Font License). Your browser vendor and the Chrome Web Store handle installation and updates under their own policies.

6. Your choices

• Use Overlay or the cursor Spotlight and the camera is never touched.
• Revoke camera access any time in your browser’s site settings.
• Turn off Improve accuracy from clicks under More to stop eye tracking learning from your clicks.
• Switch off Sync settings to keep everything on one device.
• Remove the extension to delete all of its stored data.

Because we hold no personal data from the extension, there is nothing for us to access, correct or delete. If you have emailed us and want that correspondence erased, ask and we will delete it.

7. Children

Privacy Shield is not directed at children under 13, and we do not knowingly collect information from anyone, including children. Parents and guardians who have questions can contact us using the details below.

8. Changes to this policy

If this policy changes, we will update the date at the top of this page and describe meaningful changes in the changelog. If a future version ever needs to handle data differently, we will say so before it ships and ask for your consent where the law or the Chrome Web Store requires it.