Legal Notice & GDPR
Legal information and data protection policies regarding the GetYourAuthSafe extension.
Last updated: February 2026
Summary
- • No password interception
- • The whitelist remains under user control
- • Reporting: only the domain is transmitted
- • Optional synchronization via account
Table of Contents
This page describes the extension and its data processing activities. For any request: support.
1. Extension publisher
The GetYourAuthSafe extension is published by GetYourCyber.
GetYourCyber acts as the data controller within the meaning of the GDPR.
Official website
https://www.getyourcyber.com
2. Purpose
GetYourAuthSafe warns the user when an authentication form appears on a site that is not explicitly expected.
The extension does not block the user and does not modify pages: it displays an alert and leaves the decision to the user.
3. Data processed
By default, the extension does not collect any personal data. Any processing is limited and security-oriented.
Local whitelist
The trusted list is stored in the browser (chrome.storage) and remains editable by the user.
Synchronization (optional)
If enabled, the whitelist can be linked to a GetYourCyber account in order to be restored across multiple devices.
Reporting
When a report is made, only the domain name is transmitted for security analysis.
No sensitive data
No passwords, identifiers, or form content are read, stored, or transmitted.
Important: GetYourAuthSafe is not designed to “see” your credentials, but to alert you to unexpected pages.
4. Legal basis (GDPR)
Depending on the features used, processing may be based on:
- Consent (e.g. synchronization voluntarily enabled)
- Legitimate interest (security improvement, phishing reduction)
5. Retention
Synchronized data is retained as long as the account is active or until deleted by the user.
Domain reports are retained for a maximum period of 12 months for security analysis and detection improvement purposes, after which they are deleted or anonymized.
6. Your rights
In accordance with the GDPR, you have in particular the following rights:
7. Security
The extension is designed to minimize data usage: no page content sent, no credentials processed.
Exchanges (sync / report) are carried out over HTTPS and limited to what is strictly necessary.
Reports are processed in an aggregated manner and are not used to individually identify a user.
GetYourAuthSafe is a vigilance tool: it reinforces human decision-making at the moment a site requests authentication.