Privacy for the private beta

One selected page, only when you ask

Waypoint Scan BETA starts capture only when you click Analyze in the extension. It reloads the selected allowed HTTPS tab once and temporarily observes the network and page-lifecycle metadata needed to explain that visit. It does not continuously monitor browsing history.

Local processing and sanitization

Chrome may deliver debugging events containing sensitive values. Waypoint Scan immediately selects allowed metadata and sanitizes it locally. Cookies, authorization values, request/response bodies, form values, browser-storage values and raw console content are not retained in capture records or uploaded. Sanitized evidence can include redacted requested addresses, public hostnames, status, timing, byte counts, redirects, resource relationships, connection/certificate metadata and bounded coverage information.

Temporary report and handoff

The sanitized report stays in trusted extension session memory, bounded by the report limit and a ten-minute lifetime. A one-time capability lets the protected hosted viewer receive it directly through Chrome messaging in the original report tab. Reports and handoff capabilities are not sent to the hosting server, Google OAuth parameters, telemetry or a report backend. A signed-out flow temporarily retains only the handoff capability in per-tab sessionStorage while sign-in completes.

Clear local report revokes the capability and clears retained report data and the active viewer where possible. Expiry stops access and clears the active local viewer; session memory is lost at browser restart. Cleanup cannot execute while Chrome is not running. Clearing is not a promise of forensic secure erasure, and cannot recall information you independently copied. Legacy plaintext extension reports are purged.

Hosted access and providers

Google sign-in supplies necessary identity information to authorize access. We request only openid, email and profile. Authentication uses secure HttpOnly cookies. A separately issued, time-limited reviewer credential can authorize a restricted reviewer identity; it is not the owner's Google credential or automation credential.

Vercel serves the website/application, and Google provides owner sign-in. These providers may process ordinary network/request/authentication metadata such as IP addresses, user agents, request paths and identity information under their own policies. This is distinct from capture reports, which are not uploaded. The extension includes no report analytics, advertising or third-party capture service. Email you voluntarily send to support is handled by our mail-forwarding provider and monitored mailbox service.

Limited Use

Waypoint Scan uses information only to provide and support its disclosed single purpose: explaining one user-selected website reload. Our use of information received from Chrome and Google APIs adheres to the Chrome Web Store User Data Policy, including Limited Use requirements. We do not sell capture or identity data, use it for advertising, transfer it to data brokers, or use it for unrelated profiling. Humans do not receive local capture reports unless you voluntarily share specific information for support.

Support and your choices

You can cancel capture, clear the local report, sign out, revoke Google authorization, or uninstall the extension. Contact support@waypointscan.dev for privacy or support questions. Do not send cookies, credentials, raw HAR files, private reports or handoff fragments.