Privacy Policy

What the extension does with data

The Day21 - Unseen extension ("the extension") stops the sites you enable from sending read receipts, typing indicators, view records for 24-hour posts, and online status. To do that, it:

• Holds signals back inside the page. On two of the supported sites, the extension works inside the page's own code and stops these signals before they are sent. It does not read, store, or send your messages, contacts, posts, or any other content.
• Checks the type of outgoing chat events on one site. On the third supported site, the extension looks at the type of each chat event right before your browser sends it, and holds back read and typing events. It reads only the event type, never the message text, which is end-to-end encrypted. All other requests are sent unchanged.
• Stores your settings in your browser. Your settings — the Protection switch, one switch for each protection on each site, and your interface language — are kept in your browser's local extension storage. They stay until you clear the extension's storage or uninstall it.
• Shares your switches with its own code on enabled sites. Part of the extension runs inside the pages of the sites you enable. So it can check your switches at the moment a signal is about to be sent, the extension places a copy of your on/off switches in that page. Because this code runs in the page's own context, other scripts on that site could in principle read that copy. It contains no personal information — only on/off switches — and the page has no way to send anything back to the extension or to us.
• Shows diagnostics on request. When you open the toolbar popup on an enabled site, the extension reads the protection status from that page, on your device, to show which protections are active. If you click "Copy diagnostics", a short report is copied to your clipboard: the extension version, which supported site it is and its host name, the status of each protection, and your switch settings. It contains no page addresses beyond the host name and no page content, and it goes nowhere unless you paste it yourself.

What we never do

• No accounts or sign-in of any kind.
• No analytics, telemetry, usage statistics, or crash reporting.
• No collection of messages, contacts, browsing history, credentials, or personal information through the extension.
• No selling, sharing, or monetizing of data.
• No third-party code, and no remote configuration or code loaded from our servers — the extension ships complete.

Browser permissions, explained

• Site access (on demand). The extension installs with no access to any website. It asks for access to a supported site only when you enable that site, and only for that site's addresses. Your browser describes this as reading and changing your data on that site; the extension needs it to run inside those pages and hold the signals back. You can turn a site off again in the extension's settings or in your browser's extension settings at any time, which removes that access.
• Storage. Used to keep your settings on your device.
• Scripting. Used to run the extension's page scripts on the sites you have enabled, and only there; to place the copy of your switches in those pages; and to read the protection status for the popup.
• Toolbar and active tab. The toolbar icon turns colored on the sites you enable through a browser rule that matches the address, without the extension reading it. When you click the icon, your browser gives the extension temporary access to the current tab; the extension uses it only to read the tab's address, so it can show the right options.
• Network rules. On one of the supported sites, once you enable it, the extension removes two security headers from that site's responses: Content-Security-Policy and Content-Security-Policy-Report-Only. The site uses them to limit which scripts may run on its pages, and they would otherwise block some of the extension's protections. While that site is enabled, it loses that layer of protection in your browser; turning the site off restores it. The other two supported sites are not changed. The extension does not block, record, redirect, or read your traffic.

This website

This website (www.day21.dev) sets no cookies and runs no analytics or tracking scripts. Fonts and all assets are served from our own origin. Our hosting provider processes standard request data (such as IP addresses) as any web host must in order to deliver pages and protect against abuse; we run no analytics code and see only aggregate traffic statistics in our hosting dashboard.

If you email us

When you write to us, we receive your email address and whatever you include in your message, such as a diagnostics report you chose to paste. We use them only to reply and keep them only as long as the conversation needs. You can ask us to delete that correspondence at any time.

Your rights

Privacy laws such as the GDPR and CCPA give you rights over personal data that an organization holds about you. The extension gives us no personal data, so there is nothing from it for us to access, export, correct, or delete. If you have emailed us, you can ask for a copy or deletion of that correspondence. Data the extension stores locally can be removed at any time by clearing the extension's storage or uninstalling it.

Children

The extension and this website are not directed at children. The extension collects no personal data from anyone, including children.

Changes to this policy

If this policy changes, the new version will be posted on this page with an updated effective date.