PRIVACY
ClickPhix privacy policy
Effective date: 10 October 2026
This policy covers the free, personal version of the ClickPhix browser extension. It explains how ClickPhix handles information while checking for copied text and page instructions associated with ClickFix attacks.
Information processed on your device
To identify suspicious patterns, ClickPhix locally checks text copied by you or written to the clipboard by a page. At the time of a copy or clipboard write, it may also check up to 30,000 characters of visible page text as context. The copied text and page text are analyzed in your browser and are not saved as a history or log.
If a warning is shown, ClickPhix temporarily stores the page’s origin (the site name, such as https://example.com), the detection category, and the time of detection in Chrome’s session storage so the warning can identify where it came from. The warning removes this information after loading it. ClickPhix does not store the full page URL or the copied command in the warning record.
ClickPhix also uses Chrome extension storage for local settings, the protection state, and your consent version and timestamp. Chrome manages this extension storage on your device.
First-use consent
Protection is off until you review the notice in the ClickPhix toolbar popup or extension settings and select “Agree and enable protection.” ClickPhix stores your consent version and the time you agreed locally so it can remember your choice. You can withdraw consent at any time by pausing protection in settings.
How the information is used and shared
The information above is used only to provide the extension’s personal protection and show a warning. In the free personal version, detection data is not sent to ClickPhix servers or shared with other parties. ClickPhix does not sell this information, use it for advertising, or use it to build a browsing profile. The extension does not require an account.
Retention and control
Copied text and page text are processed temporarily in memory during detection and are not retained by ClickPhix. Warning context is kept in Chrome session storage until the warning reads it; Chrome may clear session storage when the browser session ends. Local extension settings remain in Chrome extension storage until changed or removed through Chrome.
Permissions
ClickPhix requests access to pages you visit so it can check visible page instructions and clipboard activity across websites where ClickFix attacks may appear. The storage permission is used for local settings and temporary warning context. Detection runs locally in your browser.
Policy scope
This policy applies to the free personal extension. It does not describe organization enrollment, team alerts, or other future services. If ClickPhix adds features that change how information is handled, this policy will be updated and the change will be disclosed before the new handling begins.
Chrome Web Store Limited Use
ClickPhix’s use of information accessed through Chrome APIs is limited to providing its disclosed protection feature and complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
Contact
For questions about this policy or the extension, visit the ClickPhix support page.