PRIVACY POLICY FOR WA WEB TOOLKIT PLUS
Last Updated: October 26, 2026
1. INTRODUCTION & COMMITMENT TO PRIVACY
WA Web Toolkit Plus ("we", "our", or "the extension") is developed with a strict "privacy-by-design" philosophy. We believe that tools created to protect your privacy on WhatsApp Web must themselves uphold the highest standards of data protection.
This extension does NOT collect, harvest, monitor, store, sell, or transmit any personal data, chat conversations, contact lists, phone numbers, media files, or browsing activity to any external server, third party, or cloud service.
--------------------------------------------------------------------------------
2. ARE ALL OF THESE PERMISSIONS REALLY NECESSARY?
--------------------------------------------------------------------------------
YES. We follow the principle of least privilege required by the Google Chrome Web Store policies. We request strictly two permissions, each serving a direct and necessary functional purpose:
1. Permission: "storage"
• Why is it needed?
When you toggle on "Blur Conversation Messages", set a 4-digit PIN for Screen Lock, or write a custom Quick Reply template (e.g. "Thank you for contacting us!"), the extension must remember your choices so you do not have to reconfigure them each time you open your browser.
• Could we work without it?
No. Without storage permission, every time you close the popup or refresh WhatsApp Web, all your custom templates and privacy toggle settings would immediately be lost.
• Security & Privacy Guarantee:
The extension uses Chrome's built-in client-side storage ("chrome.storage.local"). All saved data remains strictly inside your own device and is never uploaded anywhere.
2. Host Permission: "https://web.whatsapp.com/*"
• Why is it needed?
The core functionality of WA Web Toolkit Plus is to apply real-time CSS blur effects onto chat bubbles, contact names, and profile avatars, as well as to show the screen lock overlay when you step away from your computer.
• Could we work without it?
No. A browser extension cannot modify the visual appearance of a webpage or inject privacy blur filters into WhatsApp Web without specific permission to interact with that domain.
• Security & Privacy Guarantee:
We do NOT request broad permissions such as "<all_urls>" or "http://*/*". The extension is strictly restricted to "https://web.whatsapp.com/*" and has zero access to any other website you visit.
--------------------------------------------------------------------------------
3. WHAT PERMISSIONS DO WE DELIBERATELY NOT REQUEST?
--------------------------------------------------------------------------------
To maintain complete safety and earn your trust, we intentionally avoid any intrusive permissions:
• NO "cookies" permission: We cannot read your WhatsApp session tokens, authentication cookies, or login credentials.
• NO "webRequest" permission: We do not intercept, inspect, or modify your network traffic or messages.
• NO "clipboardRead" permission: We cannot read your clipboard data.
• NO "identity" permission: We do not access your Google account, email, or personal identity.
• NO background telemetry or tracking servers: We do not use Google Analytics or third-party tracking SDKs.
--------------------------------------------------------------------------------
4. DATA COLLECTION, TRANSMISSION, AND THIRD PARTIES
--------------------------------------------------------------------------------
• Messages and Chat Content:
The extension never reads, logs, or transmits your WhatsApp chat messages. Privacy blurring is performed entirely within your browser's local document object model (DOM) using client-side CSS.
• Contact Information & Phone Numbers:
When using the "Direct Chat" feature, the phone number and optional message you enter are used solely to generate a standard WhatsApp Web deep link ("https://web.whatsapp.com/send?phone=..."). No numbers are recorded or sent anywhere.
• Third-Party Sharing:
We have no external databases or servers. Therefore, zero data is ever shared with, sold to, or monetized by third parties, advertisers, or data brokers.
--------------------------------------------------------------------------------
5. USER CONTROL & DATA DELETION
--------------------------------------------------------------------------------
You maintain complete control over all data stored by the extension:
• You can edit or delete any saved Quick Reply template directly from the popup interface.
• You can reset all privacy toggles and remove your PIN passcode at any time via the "Settings" tab.
• If you uninstall the extension from Chrome, all locally stored preferences and templates are instantly and permanently purged by your browser.
--------------------------------------------------------------------------------
6. DISCLAIMER & TRADEMARK ACKNOWLEDGEMENT
--------------------------------------------------------------------------------
WA Web Toolkit Plus is an independent extension and is not affiliated, sponsored, authorized, endorsed, or associated with WhatsApp LLC, Meta Platforms, Inc., or any of their affiliates or subsidiaries. "WhatsApp" is a registered trademark of WhatsApp LLC.
--------------------------------------------------------------------------------
7. CONTACT
--------------------------------------------------------------------------------
If you have any questions, feedback, or security inquiries regarding this Privacy Policy or the operation of the extension, please contact the developer via the support link on the Chrome Web Store extension page.