BaitBlock is built on one principle: nothing ever leaves your device.
What the extension processes
In Gmail: the sender, subject, links, and text of emails you open — to check them for phishing signals.
On other sites: the page's domain, title, visible text, its logo link, and whether it asks for sensitive input (password, card number, one-time code, ID document, contact details) — to check whether the site impersonates a known brand or harvests credentials.
Where processing happens
All analysis runs locally in your browser. This includes the AI analysis, which uses Chrome's built-in on-device model (Gemini Nano). No email content, page content, browsing history, or any other data is ever transmitted to us or to any third party. The extension makes zero network requests.
What is stored
Only on your own device, via Chrome's local extension storage:
your preferences (on/off, scan modes),
scan counters,
a local history of flagged items (viewable and clearable in the popup),
the list of domains that already passed a check, so they are not rescanned (viewable and removable in the popup).
What we collect
Nothing. No accounts, no analytics, no telemetry, no cookies, no tracking of any kind.
Changes
If this policy ever changes, the updated version will be posted at this address with a new date. Since the extension has no server side, changes can only make guarantees explicit — the zero-collection architecture is structural.