Trust Badge - Privacy Policy

The short version

Trust Badge analyzes websites locally and contributes anonymized trust signals to a crowdsourced intelligence database so everyone benefits. Your browsing history and personal data are never collected.

What Trust Badge does

Trust Badge evaluates the trustworthiness of websites you visit by analyzing publicly available security signals: SSL certificate validity, domain reputation, HTTP security headers, and known threat indicators. The result is a visual trust score displayed in your toolbar.

Data collection

Trust Badge does not collect your name, email, browsing history, or any personally identifiable information. There is no account and no registration.

When you opt in to crowdsourced intelligence, Trust Badge contributes anonymized trust scores and site analysis results to a shared database. This includes domain-level findings such as SSL status, security header presence, and threat indicator matches. It never includes full URLs, page content, form inputs, or anything tied to you personally.

If you opt out, crowdsourced features are disabled but local analysis continues to work normally.

Network activity

Trust Badge makes network requests in two cases:

• Threat intelligence updates: locally bundled threat databases are updated periodically to keep detection current
• Crowdsourced contributions (opt-in): sends anonymized domain-level findings to the Excalion crowdsourced intelligence API so newly discovered risky sites can be flagged for all users

No browsing history, URLs beyond the domain being analyzed, or personal data is transmitted.

Permissions

Trust Badge requests only the permissions required to function:

• activeTab: to analyze the security indicators of the page you are currently viewing
• storage: to save your preferences and cached trust scores locally
• webRequest: to analyze HTTP response headers for security assessment

That is the complete list. No access to browsing history or other tabs.

Where your data lives

Your preferences and cached trust scores are stored locally in chrome.storage.local. This data never leaves your device. If you uninstall the extension, this data is deleted automatically by Chrome.

Third-party services

Trust Badge queries the Excalion crowdsourced intelligence API when opt-in is enabled. Only the domain name and anonymized analysis results are sent, never full URLs or page content. No other third-party services are used.

Cookies and tracking

Trust Badge does not use cookies and does not track you in any way.

Supported browsers

Trust Badge works on Chrome, Edge, and Brave. This privacy policy applies equally to all supported browsers.

Changes to this policy

Any changes will be reflected in extension updates. The date at the top of this page will be updated accordingly.

Contact

For questions about this privacy policy: hello@excalion.io