Hide & Sneak: Privacy Policy

Effective September 30, 2026 · Applies to the Hide & Sneak Chrome extension, version 0.9.0 and later

Summary

Hide & Sneak does not collect, transmit, sell, or share any personal data. Everything it does happens on your own computer, inside your browser.

What the extension processes

While Agent Mode is on, the extension reads the text and form fields of the web pages you visit so it can replace sensitive information (such as verification codes, card and account numbers, and passwords) with placeholders, and lock form fields you should fill in yourself. This happens only on your device. The original values are never saved by the extension and never leave your computer. While Agent Mode is off, the extension does not run on web pages at all.

What is stored on your computer

• Your settings: Agent Mode on/off, which protection packs are enabled, the auto-off timer, and any protected pages, words, or sites you add. Text you choose with the right-click Hide this from AI agents command is saved as a protected word, the same as typing it into the settings page, so it can be hidden on future pages. You can see and remove these words on the settings page.
• An activity log of what kind of item was hidden or protected, on which page (web address without query parameters), and when. For example, "2FA code hidden on mail.google.com/mail/u/0/." It never contains the hidden values themselves. The log keeps at most about 5,000 entries, and you can export or clear it at any time from the extension's settings page.

While Chrome is open, the extension also keeps two short-lived items in Chrome's session memory (cleared when Chrome closes): which tabs you've unlocked for sign-in and until when, and the last phrase you hid with right-click, so you can undo it. The original targets of disabled login links are kept only in that page's memory, so they can work again when you unlock the page or turn Agent Mode off.

This information is kept in Chrome's local extension storage on your device. It is not synced or sent anywhere, and it is removed when you uninstall the extension.

Network access

The extension makes no network requests. It has no analytics, no telemetry, no accounts, and no servers. You can verify this in the open-source code.

Feedback links

The extension's popup and right-click menu include "Report a problem" links. Only if you click one, it opens a GitHub page in a new tab, with the extension version and the current site's domain (for example, mail.google.com, not the full address) filled into the form. Nothing is submitted unless you choose to submit the form on GitHub, where GitHub's own privacy policy applies.

Third parties

No data is shared with or sold to anyone. The extension has no third-party code, advertising, or tracking.

Changes

If this policy changes, the updated version will be posted on this page with a new effective date, and noted in the changelog.

Contact

Questions? Open an issue on GitHub.