CardVault Pro - Secure Card Manager

Manage and securely share your credit and debit card information with friends

CardVault Pro is a secure local card management extension that stores all card information on your device only. No data is sent to external servers. Your financial information stays private and under your complete control. CardVault Pro** respects your privacy. We are committed to transparent data practices: - **All data stored locally** on your device - **Zero cloud storage** - No servers involved - **No external connections** - Complete offline capability - **No tracking** - No analytics or monitoring - **User controlled** - You decide what to store What Information We Handle Information You Provide: - Card holder name - Card type (Credit/Debit) - Card number - Expiration date - CVV number - Personal notes **Information We Do NOT Collect:** - Browser history - Browsing habits - Usage analytics - Location data - Device information - IP addresses - Cookies or identifiers ### How Information is Stored **Storage Location:** - Chrome's `chrome.storage.sync` API - Encrypted by Chrome's storage system - Synchronized only to your Chrome profile across devices - Removed immediately upon uninstall **Access Control:** - Only this extension can access stored data - No other extensions can access your cards - No websites can access stored information - No background processes monitor your data ### Security Measures **Data Protection:** - Card numbers masked (●●●● ●●●● ●●●● ●●●●) by default - CVV hidden until user reveals - Click-to-reveal functionality prevents accidental exposure - No plain-text storage of sensitive data **Extension Security:** - No malware or malicious code - No form hijacking - No unwanted modifications to websites - No automatic actions without user interaction ### Data Sharing **Our Commitment:** - ❌ **No third-party sharing** - Your data never leaves your device - ❌ **No marketing companies** - No data sold - ❌ **No analytics services** - No usage tracking - ❌ **No advertisement networks** - No ad targeting - ❌ **No external APIs** - Complete isolation ### User Control & Deletion **Complete User Control:** **Delete Individual Cards:** - Each card has a delete button - Permanent removal on click - No recovery after deletion **Delete All Cards:** - Clear all cards at once - Immediate permanent deletion - Cannot be undone **Uninstall Extension:** - All data automatically removed - Chrome removes stored information - No residual data remains **Export Data:** - View all card information anytime - Manual copy/paste available - No automatic export function ### Transparency **What We Do:** ✅ Store cards locally ✅ Protect sensitive data with masking ✅ Provide full user control ✅ Encrypt data in transit (Chrome handles) ✅ Support Chrome sync (optional) **What We Don't Do:** ❌ Track your activity ❌ Collect personal data ❌ Send data to servers ❌ Share with third parties ❌ Show advertisements ❌ Modify website behavior ❌ Create tracking cookies ### Compliance **Privacy Regulations:** - GDPR compliant - User has complete data control - CCPA compliant - No data collection beyond user input - Chrome Web Store policy compliant - Transparent practices **Security Standards:** - No credential theft capabilities - No keylogging functionality - No form hijacking mechanisms - No payment processing interference ### Permissions Explained **Why We Request Permissions:** | Permission | Reason | Data Shared | |-----------|--------|------------| | `storage` | Store cards locally | No | | `alarms` | Schedule tasks | No | | `activeTab` | Tab information | No | | `scripting` | Run extension scripts | No | **All permissions used for extension functionality only - never for tracking or data collection.** ### Contact & Support **Privacy Questions:** - Check this privacy description - Review stored data in extension - Verify Chrome storage settings - Uninstall if concerns arise **Issues or Concerns:** - No data leaves your device - Delete suspicious cards anytime - Reinstall extension to reset - Chrome support for storage issues ### Changes to Privacy Policy We may update this privacy description with new versions. Changes will be announced through: - Chrome Web Store update notes - Extension version updates - Changelog documentation ### Technical Privacy Implementation **No Tracking Code:** - No Google Analytics - No Mixpanel or Amplitude - No Sentry error reporting - No third-party scripts **No Network Requests:** - No API calls - No CDN resources - No external fonts - No beacon tracking **Offline Capable:** - Works without internet - No connection required - All features available offline - Complete local independence ### User Rights **Your Rights:** 1. **Right to Know** - See all stored data anytime 2. **Right to Delete** - Remove data permanently 3. **Right to Control** - Decide what to store 4. **Right to Privacy** - Data never shared 5. **Right to Transparency** - Clear privacy practices ### Data Retention **How Long We Keep Data:** - Cards stored until you delete them - No automatic deletion policies - You control retention - Uninstall removes all data **After Deletion:** - Permanently removed from Chrome storage - No backups or archives - No recovery possible - Complete data removal ### Children's Privacy **CardVault Pro is not intended for children:** - No features targeting minors - No age-gated content - Financial data application - Designed for adult users **Parental Controls:** - Use Chrome's parental controls - Restrict extension installation - Manage extensions via Settings ### Third-Party Services **CardVault Pro uses:** - ✅ qrcodejs (QR code generation) - Local only - ✅ Chrome APIs - First-party Google services - ❌ No external APIs - ❌ No third-party libraries for storage **QR Code Library:** - Generates QR codes locally - No data sent to external services - JavaScript-based generation - Card data stays on device ### Data Security Best Practices **User Recommendations:** 1. **Use Strong Password** - Protect your device password - Secure Chrome profile 2. **Keep Chrome Updated** - Regular security patches - Latest encryption standards 3. **Monitor Stored Cards** - Review cards regularly - Delete unused cards - Remove compromised cards 4. **Device Security** - Antivirus protection - Firewall enabled - OS updates installed ### Incident Response **If Data is Compromised:** 1. Delete all cards from extension 2. Uninstall and reinstall extension 3. Use new card credentials 4. Contact your card issuer 5. Update passwords ### Future Updates **Planned Security Improvements:** - Biometric unlock (if platform supports) - Master password protection - Card backup to secure cloud (opt-in) - Multi-device synchronization improvements **Privacy Guarantees:** - No tracking will be added - No data sharing will occur - No advertisements will be shown - Local-first approach maintained ### FAQ **Q: Is my card data safe?** A: Yes. Data is stored locally and encrypted by Chrome. Never sent to servers. **Q: Can you see my cards?** A: No. We cannot access any stored data. Only you can see it. **Q: What happens if I uninstall?** A: All data is permanently deleted from Chrome storage. **Q: Can other extensions see my data?** A: No. Extension storage is isolated and private. **Q: Is my data backed up?** A: Only if you use Chrome sync to your account. You control this. **Q: Can you recover deleted cards?** A: No. Deletion is permanent and cannot be undone. --- ## Summary **CardVault Pro** is designed with privacy as the foundation: - 🔒 **Local Storage Only** - Your data, your device - 🚫 **No Tracking** - Transparent practices - 👤 **User Control** - You own your data - 🔐 **Secure** - Encrypted by default - 💯 **Honest** - No hidden practices **Your trust is our priority.** --- *Last Updated: February 14, 2026* *CardVault Pro Version: 1.0.0* *Chrome Extension - Manifest V3*