Privacy Policy

Last updated: October 2026

Guardián Web is a defensive extension designed around the principle of minimal data collection. Here's exactly what it does with your information.

What data it handles and where

Data	Where it lives	Does it leave your device?
Per-tab risk signals	Session memory (cleared on close)	No
Warning history, trust list, settings	Browser local storage	No
Local copy of the malware feed	Local storage	No (download only)
Data you type into forms	Only in the page's own memory	Never stored or sent
Text the site copies to your clipboard	Only in the page's own memory	Never stored or sent
Signature requests from your crypto wallet	Only in the page's own memory	Never stored or sent

What leaves your device

Freshly installed and with no API keys, the extension makes only these two requests, and neither carries the domain you visit:

• Community reputation (sec.fourmartech.es): while browsing, only a hash prefix of the domain is sent (k-anonymity). The server never knows which specific site you're visiting.
• URLhaus malware feed: periodic download of a public list; it includes no data about you.

Only if you turn them on:

• Google Safe Browsing / URLhaus: with your own API keys, the URL (Google) or the domain (URLhaus) of each page you visit is sent.
• Domain age (detector off by default): the domain of each unknown site is sent to rdap.org to find out when it was registered.

Local mode, which you can enable in the options, disables all these queries: nothing leaves your device.

Community reports

• Sent only when you manually click "Report this site." Nothing automatic.
• An anonymous, random installation identifier is used, stored hashed on the server.
• No email, account or IP address is stored: a report contains the domain, the category, the date and a keyed hash of the source network (the truncated IP), used only to stop fake reports: limiting how many come from one network and validating a domain only when distinct networks report it.

What Guardián Web does NOT do

• Does not collect or sell browsing data.
• Does not use analytics or telemetry.
• Does not inject ads or alter content (except the warning banner).
• Does not create accounts: there is no email, name or profile tied to you.
• Does not download or run remote code: only the code shipped in the package runs.
• With the default settings it sends your browsing to no server; in local mode it makes no requests at all.

Permissions it does NOT request

What it doesn't ask for matters as much as what it does. Guardián Web declares no cookies, history, bookmarks, clipboardRead, identity or nativeMessaging permission: it technically cannot read your session cookies, your browsing history, your bookmarks or your clipboard, nor talk to programs on your machine. The full list is in the repository's manifest.json.

How to delete your data

There is no account to close because none is ever created. The warning history is cleared from the popup itself; the trust list, settings and API keys from the options page. Uninstalling the extension wipes all of its storage at once.

This website

This page uses no cookies, no analytics and no third-party fonts or scripts: it's static HTML and CSS. Like any web server, it receives the IP address of incoming requests in order to answer them; it is never cross-referenced with extension data or used to identify anyone.

Open source

All the code is public and auditable under the MIT license. You can verify for yourself exactly what the extension does.