The Everyday Security Pop-up Blocker (the "Extension") is a Chrome extension operated by EverydaySecurity Incorporated ("EverydaySecurity," "we," "our," or "us") and distributed through the Chrome Web Store. It does two things:

• It closes unwanted pop-ups: new tabs or windows that a website opens without you asking, often when you click anywhere on the page, and pages that swap your tab for an ad while hiding the page you wanted in a new tab. It also hides ads that cover the page from other websites, and lets you remove any ad you point at.
• If you allow it, it sends us the addresses of those pop-ups and ads, so we can examine the sites behind them for scams and malware.

This Policy covers the Extension only. Our other products have their own policies.

1. What stays on your computer

To decide what is a pop-up, the Extension watches, inside your browser:

• which tab opened which new tab, and the address the new tab loads;
• where on a page you last clicked, and whether you held Ctrl, Shift or Cmd or used the middle button. This is how it tells a link you meant to open from a click that a page hijacked.

It also keeps:

• a count of pop-ups blocked on each site;
• the sites you have told it to leave alone;
• the ads you removed yourself, as a description of where they sit on each site's pages, so they stay hidden next time;
• a short list of recent pop-ups, so you can review them and report one it missed.

None of this leaves your computer unless you turn on sharing (Section 2). It is stored in your browser's extension storage and removed when you uninstall the Extension. The Extension never reads passwords, form contents or the text of the pages you visit.

2. What is sent to us, if you allow it

Sharing is off until you turn it on. The Extension asks when it is installed, and you can change your mind at any time in its settings.

When sharing is on, for each pop-up it blocks, each one you report, and each ad it hides or you remove, the Extension sends:

• the full address of the pop-up, for example https://ads.example/click?id=123, or for an ad on the page, the address the ad links to. An ad that links nowhere is hidden but not reported;
• only the site name of the page that opened it, for example streaming.example, never the full address of the page you were on;
• how it was caught: blocked automatically, reported by you, a tab swap, or an ad on the page hidden automatically or removed by you;
• when it happened, and the Extension's name and version.

Never sent:

• your browsing history or the pages you visit;
• the full address of the page you were on;
• cookies, account names or anything you typed;
• any identifier for you or your browser.

Our servers do not record your IP address alongside a report, and the reports carry no ID that links one report to another.

A pop-up address can contain tracking codes that the advertiser created for that one ad. They identify the ad click, not you, but we treat these addresses with care regardless.

3. What we do with it

We use pop-up addresses to find websites used for scams, malware and fraud.

• Our own isolated research devices may visit the reported addresses to examine them. Our customer-facing services never do.
• Findings may be shared as security intelligence, such as "this domain serves malware," with security teams and fraud analysts, and may be used in our products and published research.

Your reports are not sold, and not used for advertising.

Service providers. Reports are stored on Amazon Web Services. Our servers' technical logs and performance metrics are monitored with Grafana Cloud, and never contain the reported addresses.

4. How long things are kept

• On your computer: until you uninstall the Extension or clear its data from Chrome's extension settings.
• On our systems: reports are deleted after 180 days. Technical logs are deleted within 90 days.
• Findings derived from reports, for example that a domain is malicious, may be kept indefinitely, because they no longer contain the original report.

5. Permissions the Extension asks for

• Read and change data on all websites. Needed to see where you click on any page, which is how the Extension tells a real click from a hijacked one, and to hide ads that cover the page. It looks only at the size, position and link address of elements that float over the page, and changes nothing except to hide them. It does not read the text of the pages you visit.
• Tabs and navigation. Needed to see when a page opens a new tab, and to close it.
• Storage and alarms. Needed to remember your settings and per-site counts, and to retry sending reports later if our servers are busy.
• Block content. Needed to stop known pop-up ad networks from loading, using a list built into the Extension.

6. Your choices

• Turn sharing off at any time in the Extension's settings. Reports not yet sent are discarded.
• Tell the Extension to leave a site alone.
• Uninstall the Extension to remove everything it holds on your computer.

Because reports carry no identifier, we cannot find or delete one person's reports on request. Each report is deleted after 180 days.

7. Changes and contact

If we change what the Extension sends, we will update this Policy before the release that makes the change, and the Extension will ask again before sending anything new.

Questions: privacy@everydaysecurity.ai.