Breach Alert extension: privacy

Last updated 2 November 2026

We collect nothing. The extension never sends your browsing history, the address of any page, or the sites you visit to us or to anyone else.

What it does

• One download. Every few hours it downloads the same public list from https://api.redteamdaily.com/public/v1/breach-domains. The request carries no cookies, no account, no page address and nothing about you; everyone gets the identical list.
• Checks on your computer. It compares the site in your current tab with that list inside your browser.
• Stores on your computer. The list and your settings (warnings on or off, snoozed sites, region) are kept in your browser’s own extension storage. Uninstalling the extension deletes them.

Permissions it asks for

• Tabs: to read the address of the tab you’re looking at, so it can be checked locally. It is never sent anywhere.
• Storage: to keep the list and your settings.
• Alarms: to refresh the list every few hours.

No access to page content, no host permissions, no analytics, no tracking, no ads and no remote code: all its code is in the package you install.

Our server

Like any website, our server sees that a computer downloaded the public list (its internet address, briefly, to stop abuse). It cannot tell which sites you visit, because the extension never tells it.

Questions: hello@redteamdaily.com. Our general privacy notice covers the website and app.