DOMGuard Privacy Policy
DOMGuard processes page content and screenshots in your browser. It does not upload them to any server.
DOMGuard does not save page content. A sensitive-data scan keeps only the type and the position on the page, not the matched text.
Optional access to all sites
Access to all websites is optional. DOMGuard asks for it only when you turn on Protect all sites. After that, DOMGuard's content scripts run on pages you visit. They hide hidden text and mask sensitive information on those pages. That work stays in the browser. Page content is not uploaded and is not saved.
Hidden text on the page
Show Hidden Text draws a list and outlines on the page. The preview exists only in the page's memory. It disappears when you close the panel. It is not saved, and it is not sent anywhere.
Screenshots
When you take a screenshot, the image is written to the system clipboard. DOMGuard does not save the screenshot, and it does not offer a download.
Payments
The only network communication is with ExtensionPay (extensionpay.com). It is used for Pro payment and for checking whether this install is paid. ExtensionPay and Stripe handle the payment. DOMGuard does not handle credit card information.
ExtensionPay saves a user record (including email and payment status), an API key, and the install time in the browser’s chrome.storage.sync, under extensionpay_user, extensionpay_api_key, and extensionpay_installed_at. This is ExtensionPay’s own behavior. For information about its privacy, see extensionpay.com.
Saved on this device
DOMGuard writes the following to chrome.storage.local. A short-lived paid flag stays in memory. The purchase record below stores only that a check said paid, and when.
- domguardScreenshotQuota — the local date and the count of free screenshots copied that day.
- maskStyle — solid black or blurred.
- protectAll — whether Protect all sites is on.
- protectGrantNeeded — whether Chrome still needs to grant all-sites access.
- protectHideText — whether hidden text is hidden while Protect all sites is on.
- autoMask — whether sensitive data is masked automatically.
- maskApiKeys, maskCards, maskEmails, maskPhones — which kinds of sensitive data are selected. Emails and phone numbers start off.
- protectDisabledHosts — hostnames of sites you paused.
- customCaptureWidth, customCaptureHeight — the last width and height, in pixels, entered for a custom-size capture.
- domguardPurchaseVerified — paid set to true, and verifiedAt, the time ExtensionPay last confirmed this install was paid. No email is stored. Removed only when ExtensionPay reports paid as false.
- hintProtectSeen, hintCaptureSeen, hintToolsSeen — whether you dismissed the first-use tips.
Permissions
- activeTab — work on the tab where you opened DOMGuard, including a screenshot of the visible area.
- scripting — inject DOMGuard’s script into that tab, and register the Protect all sites scripts after you turn that feature on.
- storage — save the settings and count listed above, and let ExtensionPay save its entitlement record.
- extensionpay.com — reach ExtensionPay for payment and Pro checks. A content script runs only on that site.
- Optional access to all sites — requested only when you turn on Protect all sites, and removed when you turn it off and nothing else needs it.
Limited use
DOMGuard uses permissions and the data described above only to hide sensitive information and hidden text, to copy a screenshot you asked for, and to check a Pro purchase. It does not sell or transfer that data. It does not use it for advertising. No person reads your page content or screenshots.
Contact
Effective date: October 22, 2026