We collect nothing.
OverPhish runs 100% locally. No data ever leaves your device.
OverPhish runs 100% locally. No data ever leaves your device.
Data Collection
Zero personal data is collected, stored, or transmitted.
- No analytics or tracking pixels
- No user IDs or accounts
- No cookies
- No crash reports or telemetry
- No IP logging
What OverPhish Actually Does
OverPhish only performs these actions on your device:
- Downloads a public blocklist from
https://blocklist.overphish.io - Stores the blocklist locally using
IndexedDB - Checks domains using the browser’s
webNavigationAPI - Blocks known phishing/malware sites before they load
Browser Permissions Explained
| Permission | Why It’s Needed |
|---|---|
webNavigation |
Detect and block phishing URLs before the page loads |
storage |
Save blocklist, statistics, and your custom whitelist locally |
activeTab (optional) |
Enable “Allow Once” and “Whitelist” buttons on the block page |
Data Stored on Your Device
All data remains exclusively on your computer:
- Blocklist (reversed domains only)
- Block statistics (today/total count)
- Custom whitelist (if you add domains)
- Last update timestamp
When you uninstall OverPhish → all data is permanently deleted.
Third-Party Services
- Blocklist source:
https://blocklist.overphish.io(public text file, no tracking) - No analytics providers
- No advertising partners
- No data processors
Your Rights
- Uninstall the extension → all data is removed instantly
- Clear browser data → OverPhish storage is wiped
- No account or login required
Contact Us
For support or privacy questions:
Email: hello@overphish.app