Effective August 13, 2026
IN ONE SENTENCE
This extension does not collect, store remotely, or transmit any of your data — everything it does happens entirely inside your own browser.
WHAT THIS EXTENSION DOES
Password Shoulder-Surf Shield hides the true length of the passwords you type from anyone watching your screen. While a password field is focused, it shows a randomized number of dots on screen instead of the real character count. The exact password you typed is unchanged and is what actually gets submitted to the site you're signing into — only what's visible on screen is altered.
DATA WE COLLECT
None of the following are collected, read, logged, or transmitted by this extension:
- Passwords & other credentials — Not collected
- Browsing history — Not collected
- Personal identifiers — Not collected
- Location — Not collected
- Financial or health info — Not collected
- Analytics or usage tracking — Not collected
WHAT IS STORED, AND WHERE
The extension saves one thing: your own on/off preference for the shield — whether it's applied to every site or only specific ones you've chosen. This is saved locally using Chrome's built-in chrome.storage API, which may sync across your own signed-in Chrome browsers the same way your bookmarks do. It is never sent to us or to any third party — we have no server, and the extension makes no network requests of any kind.
WHY THE EXTENSION ASKS FOR ITS PERMISSIONS
storage — Saves your on/off preference locally, as described above.
activeTab — Lets the popup show and toggle the setting for the site you're currently on.
tabs — Lets the toolbar icon update automatically as you switch tabs, so it always reflects whether protection is active on the page you're viewing.
host permissions (all sites) — The shield needs to work on whichever site you happen to log into — it can't know in advance which ones you'll visit. It only ever looks at password fields on the page, nothing else.
CHANGES TO THIS POLICY
If this policy ever changes, the update will be posted at this same page with a revised effective date above.
CONTACT
Created by Santhosh Tuppad
LinkedIn Profile URL: https://www.linkedin.com/in/santhosh-tuppad-338b7412/
Questions about this policy: ondsectest@gmail.com