PRIVACY POLICY
Last Updated: March 20, 2026
Effective Date: March 20, 2026
Version: 1.0

1. INTRODUCTION
   Welcome to Password Scrambler ("the Extension," "we," "our," or "us"). This Privacy Policy explains how we handle your information when you use our browser extension. We take your privacy seriously and have designed our extension with a "privacy-first" approach.

Creator Information:

Developer: Mugisha Billy Chriss

Location: Kigali, Rwanda

Website: https://cyberkey.vercel.app

Contact Email: mugishabillychriss@gmail.com

1. OUR COMMITMENT TO PRIVACY
   In Plain Language: We collect absolutely nothing. Your data stays on your device. Full stop.

Password Scrambler is built on the principle that your personal information belongs to you and only you. Unlike many extensions that track users or store data in the cloud, we deliberately designed our extension to operate 100% locally with zero data collection.

1. DATA COLLECTION STATEMENT
   Data Type Collected? Storage Location Purpose
   Passwords ❌ NO Your device only (local storage) Never leaves your device
   Personal Information (name, email) ❌ NO N/A Not collected
   Browsing History ❌ NO N/A Not accessed
   IP Address ❌ NO N/A Not tracked
   Device Information ❌ NO N/A Not collected
   Location Data ❌ NO N/A Not tracked
   Cookies ❌ NO N/A Not used
   Analytics Data ❌ NO N/A No analytics tools
   Usage Statistics ❌ NO N/A Not tracked
   Crash Reports ❌ NO N/A Not collected
   We collect NO data. Period. 🛡️
2. HOW THE EXTENSION WORKS
   4.1 Local-Only Operation
   Password Scrambler operates entirely on your local device. Here's what happens:

text
┌─────────────────────────────────────────────────────┐
│ YOUR DEVICE │
├─────────────────────────────────────────────────────┤
│ ┌─────────────────────────────────────────────────┐ │
│ │ Browser Installation │ │
│ │ ↓ │ │
│ │ Extension Loaded (no external calls) │ │
│ │ ↓ │ │
│ │ Password Mappings Saved to Local Storage │ │
│ │ ↓ │ │
│ │ Data NEVER leaves your device │ │
│ └─────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────┘
↓
┌─────────────────────┐
│ NO SERVERS │
│ NO CLOUD │
│ NO TRACKING │
└─────────────────────┘
4.2 Password Storage
Your real passwords are stored exclusively in your browser's encrypted local storage

Password mappings are never transmitted anywhere

You can view, edit, or delete your saved passwords anytime

Uninstalling the extension removes all stored data

4.3 Technical Architecture
✅ Zero external API calls - The extension never "phones home"

✅ Offline functionality - Works without internet connection

✅ No third-party libraries that could track you

✅ Open source - Code available for independent verification

1. PERMISSIONS EXPLAINED
   Your browser may ask you to grant certain permissions. Here's exactly why we need them:

Permission Required? Reason Data Accessed
storage ✅ Yes To save your password mappings locally on your device ONLY what you explicitly save
activeTab ✅ Yes To detect password fields and show typing instructions on the CURRENT tab only Page structure (not content)
<all_urls> ✅ Yes To work on ANY website where you need to log in Only detects presence of password fields
Important: These permissions are used SOLELY for the extension's core functionality. We do not read, collect, or transmit any data from your browsing.

1. THIRD-PARTY SERVICES
   We use NO third-party services. This means:

Service Type Used?
Analytics (Google Analytics, etc.) ❌ NO
Crash Reporting ❌ NO
Advertising Networks ❌ NO
Cloud Storage ❌ NO
Tracking Pixels ❌ NO
External APIs ❌ NO
Fonts/CDNs ❌ NO
Payment Processors ❌ NO (extension is free)
The extension is completely self-contained and does not communicate with any external servers.

1. DATA SECURITY
   7.1 How Your Data Is Protected
   Local Encryption: Your browser's built-in storage encryption protects your data

No Transmission: Data never leaves your device, so it cannot be intercepted

No Central Database: There's nothing for hackers to steal

Minimum Permissions: We request only what's absolutely necessary

7.2 What Happens When You Uninstall
When you uninstall Password Scrambler:

All locally stored password mappings are automatically removed

No residual data remains anywhere

No records exist on any server (because there are none)

1. CHILDREN'S PRIVACY (COPPA COMPLIANCE)
   Password Scrambler does not collect any personal information from anyone, including children under 13 years of age. We comply with the Children's Online Privacy Protection Act (COPPA) by design:

No data collection = no risk to children

No registration required = no age verification needed

No targeted advertising = no tracking

Parents can feel confident allowing children to use this extension.

1. INTERNATIONAL USERS
   Password Scrambler is used worldwide. Because we collect no data:

✅ GDPR (Europe) - Fully compliant (no data = no processing)

✅ CCPA (California) - Fully compliant (no data = no selling)

✅ PIPEDA (Canada) - Fully compliant

✅ LGPD (Brazil) - Fully compliant

✅ POPIA (South Africa) - Fully compliant

✅ Law No. 058/2021 (Rwanda) - Fully compliant

Your data never crosses borders because it never leaves your device.

1. YOUR RIGHTS AND CONTROL
   You have complete control over your data:

Right How It's Honored
Right to Access View all saved passwords via extension popup
Right to Delete Delete individual sites or clear all data
Right to Export Export your data (coming in v1.1)
Right to Uninstall Remove extension = remove all data
Right to Object Simply don't use the extension
Right to Non-Discrimination No features withheld for privacy choices
To exercise any rights:

Delete data: Open extension → Click trash icon

Export data: Coming soon

Uninstall: Browser settings → Extensions → Remove

1. CHANGES TO THIS PRIVACY POLICY
   We may update this Privacy Policy occasionally. Any changes will be:

Posted with an updated "Last Updated" date

Notified via the extension's update notes

Available at our website: https://cyberkey.vercel.app/privacy

Since we collect no data, policy changes will be minimal and related to legal requirements only.

1. OPEN SOURCE TRANSPARENCY
   Password Scrambler is open source, meaning anyone can inspect the code to verify our privacy claims:

GitHub Repository: Coming soon

Code Transparency: All code is visible and auditable

Independent Verification: Security researchers can confirm no data collection

We believe in "trust through transparency, not trust through obscurity."

1. CONTACT INFORMATION
   If you have questions, concerns, or feedback about this Privacy Policy or the extension itself:

Developer: Mugisha Billy Chriss
Email: mugishabillychriss@gmail.com
Website: https://cyberkey.vercel.app
Location: Kigali, Rwanda
Response Time: Within 48 hours

For technical support: Same contact methods

1. CONSENT
   By installing and using Password Scrambler, you consent to this Privacy Policy. Since we collect no data, there's nothing else to consent to—but we want you to know exactly how we operate.

TERMS OF USE
Last Updated: March 20, 2026

1. ACCEPTANCE OF TERMS
   By downloading, installing, or using Password Scrambler ("the Extension"), you agree to be bound by these Terms of Use. If you do not agree to these terms, do not install or use the Extension.
2. LICENSE
   We grant you a non-exclusive, non-transferable, revocable license to use Password Scrambler for personal, non-commercial purposes. The extension is provided "as is" and is free to use forever.

You may:
✅ Install and use the extension on any compatible browser
✅ Use it for personal password protection
✅ Share the extension link with others
✅ Review and audit the open-source code

You may NOT:
❌ Reverse engineer, decompile, or extract the code for commercial purposes
❌ Sell or redistribute the extension for profit
❌ Use it for illegal activities
❌ Remove or alter any copyright notices

1. USER RESPONSIBILITIES
   By using Password Scrambler, you agree that:

You are responsible for remembering your own passwords

You understand that no security solution is 100% foolproof

You will not use the extension for illegal purposes

You will keep your device and browser secure

You accept that we are not liable for any losses

1. DISCLAIMER OF WARRANTIES
   THE EXTENSION IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTIES OF ANY KIND.

To the fullest extent permitted by law, we disclaim all warranties, express or implied, including but not limited to:

Merchantability

Fitness for a particular purpose

Non-infringement

Accuracy or reliability

Security or error-free operation

We do not guarantee that the extension will prevent all keyloggers or password theft. It is a tool to increase security, not a guarantee of absolute protection.

1. LIMITATION OF LIABILITY
   TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM YOUR USE OF THE EXTENSION.

This includes:

Direct, indirect, incidental, or consequential damages

Loss of passwords or data

Financial losses from password theft

Damages from unauthorized access to your accounts

Business interruption or lost profits

Because the extension is free, you acknowledge that these limitations are reasonable.

1. INDEMNIFICATION
   You agree to indemnify and hold harmless Mugisha Billy Chriss from any claims, damages, or expenses arising from:

Your violation of these Terms

Your misuse of the extension

Your violation of any law or third-party rights

1. MODIFICATIONS TO THE EXTENSION
   We reserve the right to:

Update the extension with new features

Fix bugs and security issues

Modify or discontinue features

Release new versions

We will notify users of significant changes via:

Extension update notes

Our website (https://cyberkey.vercel.app)

1. TERMINATION
   We may terminate your right to use the extension if you violate these Terms. Upon termination:

You must uninstall the extension

Your license is revoked

All data will be deleted upon uninstall

You may terminate at any time by simply uninstalling the extension.

1. GOVERNING LAW
   These Terms shall be governed by the laws of the Republic of Rwanda. Any disputes shall be resolved in the courts of Kigali, Rwanda.
2. SEVERABILITY
   If any provision of these Terms is found to be unenforceable, the remaining provisions will remain in full force and effect.
3. ENTIRE AGREEMENT
   These Terms constitute the entire agreement between you and Mugisha Billy Chriss regarding Password Scrambler.
4. CONTACT FOR LEGAL MATTERS
   For legal inquiries or DMCA notices:

Mugisha Billy Chriss
Email: mugishabillychriss@gmail.com
Address: Kigali, Rwanda

✅ QUICK REFERENCE CARD
Topic Summary
Data Collection ❌ NONE - Zero data collected
Password Storage 🔐 ONLY on your device
Servers ❌ None - 100% offline
Tracking ❌ No analytics, no cookies
Third Parties ❌ No third-party services
Open Source ✅ Yes - fully auditable
Cost ✅ Free forever
Account Needed ❌ No account required
Jurisdiction 🇷🇼 Rwanda
Thank you for trusting Password Scrambler - Privacy by Design, Made in Rwanda 🇷🇼

Last Updated: March 20, 2026