ZenithGuard Privacy Policy
Last updated: November 2, 2026 (version 3.9.1)
ZenithGuard is a Chrome extension that blocks ads, trackers and known malware or phishing sites, and gives you tools to clean up pages. This page explains, in plain words, what it touches and where that data goes.
The short version: ZenithGuard has no server and no account. It does not collect analytics, sell data or show ads. Everything runs inside your browser. There are only two exceptions: the optional Gemini AI features, which send data to Google only when you use them with your own API key, and a daily download of public malware and phishing lists.
What ZenithGuard looks at, and why
To block ads and protect you, ZenithGuard has to see some of what your browser does. It handles this data on your device:
- Web addresses and network requests (domain, URL, request type, and whether it was blocked). Used to block ads, trackers and dangerous sites, and to show the Logger, the privacy grade and the "blocked" counts.
- Page content and page structure. Used to hide ad boxes and cookie banners, and by the tools you start yourself (Zapper, Inspector, element hiding and page cleanup).
- Your settings and rules (site allowlist, hidden elements, custom blocks, and similar).
- Short-lived diagnostics (recent errors shown in Extension Health).
ZenithGuard never reads what you type into password fields. On sites from its built-in list of known data breaches, it only notices that a password box was focused so it can show a warning.
Where it is stored
- Network logs are kept per tab, up to 200 entries per tab, in memory and in Chrome's session storage. They are cleared when the tab closes or the browser restarts.
- Settings and rules are kept in Chrome's extension storage. If Chrome Sync is turned on in your browser, Chrome may sync non-secret settings and rules between your own devices. That goes through Google's sync, never through us.
- Your Gemini API key, if you add one, is stored only on this device in the extension's private storage. It is never synced, never included in settings backups, and never passed to web pages.
To delete everything, remove the extension. Rules and caches can also be cleared one by one in Settings.
What leaves your device
- Gemini AI features (optional, off until you add your own key). When you use an AI feature, ZenithGuard sends only what that action needs, directly from your browser to Google's Gemini API over HTTPS. AI features include page analysis, "hide this with AI", fixing an anti-adblock wall, handling a cookie banner, summarising network activity, and repairing a broken hiding rule. Depending on the feature, the request can contain a screenshot of the visible page, the page address and title, some page text or element details, and the addresses of requests the page made. "Self-healing rules" is the only AI feature that can run without a click, and it is off by default. Google handles that data under the terms of your own Gemini API account. ZenithGuard runs no server in between.
-
Malware and phishing list updates (on by default, and can be turned off in
Settings). About once a day, ZenithGuard downloads two public domain lists over HTTPS from
malware-filter.gitlab.io, falling back tocurbengh.github.io. These downloads carry no cookies and no browsing data, so the list host only sees a normal download from your IP address. The lists are plain data that is checked and turned into blocking rules on your device. They are never run as code.
Nothing else is sent anywhere. The ad and privacy filter lists ship inside the extension and update only with extension updates. ZenithGuard has no remote code, analytics, crash reporting or tracking of its own.
Sharing and sale
ZenithGuard does not sell or rent your data, does not use it for advertising or credit decisions, and does not pass it to anyone apart from the Gemini requests you start yourself, as described above. The use of information received from Google APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.
Permissions
| Permission | Why ZenithGuard needs it |
|---|---|
| Access to all sites | Block ads and trackers and hide ad boxes on any site you visit |
| declarativeNetRequest | Block requests with Chrome's built-in, private blocking engine |
| declarativeNetRequestFeedback | Show which rule blocked a request in the Logger |
| webRequest | See request status for the Logger and privacy grade (observing only, never changing requests) |
| webNavigation | Know when a page or frame loads so hiding rules and logs belong to the right page |
| scripting | Apply hiding styles and start the page tools you choose |
| tabs | Know which site the current tab shows, for per-site settings, and take the screenshot an AI feature you started needs |
| storage | Save your settings and rules |
| alarms | Schedule the daily list update and end timed pauses |
| contextMenus | Add the right-click menu (block or hide an element) |
| browsingData (optional) | Asked for only if you turn on Forgetful Browsing, which clears a site's data after you close its last tab |
Changes
If ZenithGuard's data practices change, this page will be updated and the change noted in the release notes.
Contact
Questions or requests: xili.be84@gmail.com