SecureView – Privacy Policy

Last updated: April 11, 2026  ·  Version 1.0.1
Developer: Saleem Khan  ·  https://www.websaleem.com/secureview

SecureView is a Chrome extension that helps you understand how you spend your time online by tracking active browsing time, categorizing websites, and presenting daily summaries. This policy explains exactly what data is collected, where it is stored, what leaves your device, and what controls you have.

1. Data Collected

SecureView collects the following information while you browse:

• Domain names — the hostname of every site you visit (e.g. github.com).
• Active time — seconds spent actively browsing each domain per day.
• Page titles — the title of the active tab, used solely to improve AI categorization accuracy.
• Website category — a classification label (e.g. Technology, Social Media) assigned to each domain.
• User activity signals — mouse movement, keyboard, and scroll events are detected by a content script to distinguish active browsing from idle time. Raw event content is never recorded; only the presence of activity within a 10-second window is noted.
• Browser-internal pages — Chrome internal pages (e.g. chrome://extensions/) are tracked and stored under the hostname (e.g. extensions) with the category label "System". No content from these pages is read or transmitted.

SecureView does not collect passwords, form input, page content, search queries, cookies, or any personally identifiable information beyond what is listed above.

2. Where Data Is Stored

All browsing data is stored locally on your device using the Chrome Storage API:

• chrome.storage.local — daily browsing records keyed by date (data_YYYY_MM_DD), settings, and the AI classification cache. This data persists until you clear it or uninstall the extension.
• chrome.storage.session — lightweight session state (current URL, active tab, window focus). This is cleared automatically when the browser is closed.

Data is partitioned by calendar day. Each day's record is independent; no cross-day aggregation is performed by the extension.

3. Data Sent Off Your Device

For websites that cannot be classified by the built-in rule set, SecureView optionally calls an AI classification service to determine a category. This behaviour can also be enabled for all sites via the "Always use AI Categorization" setting.

When a classification request is made, the following fields are sent:

• The full page URL
• The hostname
• The page title (if available)

Requests are routed through an AWS CloudFront distribution, validated by a Lambda@Edge function, forwarded to Amazon API Gateway, processed by an AWS Lambda function, and classified by Amazon Bedrock. Only the category label is returned and stored. The real API key never leaves the server infrastructure; the extension only holds a lightweight shared secret.

Classification results are cached locally under the key br_cat_cache so the same domain is never sent twice.

No browsing data is sent if: the domain is already matched by the built-in rule set and "Always use AI Categorization" is off, or the domain is on your exclusion list.

4. Permissions Used

• tabs — to detect the active tab URL and title when you switch tabs or navigate.
• storage — to persist browsing data and settings locally.
• alarms — to flush accumulated time to storage every 60 seconds.
• idle — to detect when you are inactive (threshold: 60 seconds) so idle time is not counted.
• host_permissions (<all_urls>) — required to inject the content script that detects user activity on every page. The content script does not read or transmit page content.

5. Your Controls

• Clear today's data — the 🗑 button in the popup permanently removes all browsing data for the current day.
• Exclude domains — add any domain to the Excluded Domains list in Settings. Excluded domains are never tracked or sent for classification. You can also exclude the currently active site instantly using the 🚫 button in the current-page bar; this simultaneously removes all tracking data recorded for that domain today. Tap 🔓 on an excluded site to restore tracking.
• Toggle AI categorization — disable the "Always use AI Categorization" setting to prevent any network requests for sites already matched by built-in rules.
• Debug logging — logging is enabled by default in beta builds and disabled in production. It can be toggled in Settings and writes only to the local browser console.
• Uninstall — removing the extension deletes all locally stored data.

6. Data Retention

Daily browsing records are stored indefinitely until you clear them manually or uninstall the extension. The extension does not automatically delete old records. You can view and clear past records via the History panel in the popup.

7. Third-Party Services

The AI classification pipeline runs on Amazon Web Services (AWS). AWS services involved are CloudFront, Lambda@Edge, API Gateway, Lambda, and Amazon Bedrock. AWS's own privacy practices apply to data processed through these services. No other third-party services receive data from SecureView.

Favicon images displayed in the popup are fetched from Google's favicon service (www.google.com/s2/favicons). This exposes the domain name to Google for the purpose of retrieving an icon. No browsing time or category data is shared.

8. Children's Privacy

SecureView is not directed at children under 13. We do not knowingly collect any information from children.

9. Changes to This Policy

If this policy is updated, the revised version will be published at https://www.websaleem.com/secureview/privacy.html with an updated date at the top of the document.

10. Contact

For questions or concerns about this privacy policy, please reach out via https://www.websaleem.com/secureview.