Taiyaki Privacy Policy

Effective date: August 6, 2026

Taiyaki ("the extension," "we," "us") is a Chrome browser extension that warns users before they interact with suspected phishing websites. This policy explains what data Taiyaki collects, why, and how it is handled. It applies to the Taiyaki Chrome extension only.

What Taiyaki does

When you visit a website, Taiyaki checks its hostname against a list of trusted domains and a small set of phishing indicators (for example, a deceptive "@" in the address, or an insecure http:// connection). If a site looks unsafe, Taiyaki shows an on-page warning banner and blocks clicking, typing, and right-clicking on that page. You may choose to temporarily allow a flagged site for 10 minutes if you believe it was blocked in error.

Data we collect

Taiyaki collects the minimum data needed to operate and to review how well it is detecting phishing sites:

Data	When it's collected	Why
Website hostname (e.g. `example.com`) — never the full URL, page content, or path	When a site is blocked, and when you click "Allow this site"	To log which sites are being flagged, so detection accuracy can be reviewed and improved
Event type (`blocked` or `allowed`)	Same as above	To distinguish blocks from user overrides in the log

We do not collect:

Names, email addresses, or any other personally identifiable information
Full page content, page titles, images, or text you enter on a page
Passwords, payment details, or authentication credentials
Keystrokes, clicks, mouse movement, or other on-page activity, beyond what's needed locally to block interaction with a flagged site
Your general browsing history — only the hostnames of sites Taiyaki specifically blocks or you specifically allow are recorded

How data is stored

Blocked/allowed hostname events are sent to a database hosted on Supabase, our third-party database provider, which stores the data on our behalf. Supabase does not have any independent right to use this data.

Taiyaki also stores "temporarily allowed" hostnames locally in your browser using chrome.storage.session. This local data never leaves your device, expires automatically after 10 minutes, and is cleared when the browser session ends.

How we use this data

To maintain and improve the accuracy of Taiyaki's phishing detection
To identify false positives (legitimate sites incorrectly blocked) and false negatives (phishing sites not caught)

We do not use this data for advertising, analytics profiling, or any purpose unrelated to Taiyaki's phishing-protection function.

Data sharing

We do not sell, rent, or trade your data. We do not share it with third parties except our infrastructure provider (Supabase), which processes it solely to provide database hosting on our behalf.

Data retention

Hostname event logs are retained only as long as needed to review and improve phishing detection, and are periodically deleted. You can request deletion of any data associated with a specific hostname by contacting us (see below).

Your choices

You can uninstall Taiyaki at any time from chrome://extensions, which stops all data collection immediately.
You can clear locally stored "temporarily allowed" sites by closing your browser session or removing the extension.

Children's privacy

Taiyaki is not directed at children under 13, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy as Taiyaki changes. Material changes will be reflected by updating the effective date above.

Contact

Questions about this policy or data requests can be sent to 102425933+dennist-an@users.noreply.github.com.