OverPhish Privacy Policy

Last updated: November 24, 2025



We collect nothing.<br>
OverPhish runs 100% locally. No data ever leaves your device.



Data Collection

Zero. No personal data is collected, stored, or sent anywhere.

• No analytics
• No tracking
• No cookies
• No crash reports
• No telemetry

What We Do

• Download public blocklist: https://overphish.io/blocklist.txt
• Store it locally in IndexedDB
• Check URLs with webNavigation API
• Block phishing sites instantly

Permissions

| Permission | Purpose |
|-------------------------|----------------------------------------------|
| webNavigation | Block phishing before page load |
| storage | Save blocklist & whitelist locally |
| activeTab | “Allow Once” / “Whitelist” buttons |

Local Data (deleted on uninstall)

• Blocklist
• Block stats
• Whitelist
• Last update time

OverPhish — Privacy by design. Protection by default.