KeyPilot

Privacy Policy

Last updated: July 25, 2026

No data collection No network requests No accounts or login No analytics or trackers Single permission: storage

KeyPilot is a 100% offline Chrome extension. It has no backend server, makes no network requests, and cannot transmit your data anywhere — there is nothing on the other end to send it to. Anything KeyPilot stores is written to your browser's local, on-device storage (chrome.storage.local) using Chrome's built-in storage permission, and never leaves your machine. This policy explains exactly what that means in practice.

1. Overview

KeyPilot ("the extension", "we", "our") is a password generation, strength-checking, and local credential-organization tool built as a Chrome browser extension (Manifest V3), developed by THINXIFY. This policy applies to the KeyPilot extension and describes what data it handles, where that data lives, and what control you have over it.

The short version: KeyPilot doesn't collect anything, doesn't talk to any server, and doesn't know who you are. Everything it stores stays in your browser's local storage on your own device.

2. What we don't do

We do not operate any servers that KeyPilot communicates with.
We do not collect, receive, or have access to any of your data — generated passwords, saved accounts, or otherwise.
We do not use analytics, telemetry, crash reporting, or any third-party tracking libraries.
We do not sell, rent, or share data with third parties, because we never receive any in the first place.
We do not require or support account creation, sign-in, or cloud sync.
We do not use cookies.

3. What is stored locally

KeyPilot stores a small amount of data using Chrome's chrome.storage.local API, which keeps data sandboxed to the extension and to your device — it is not synced to a Google account, not accessible to other extensions or websites, and not visible to us. Storage only happens as a direct result of an action you take.

Feature	What's stored	When
Favorites	The plaintext password you starred, with a timestamp	When you tap ☆ Favorite
Recent Passwords	Your last 20 single-password copies (plaintext), with timestamps	When you copy one password at a time (bulk/"Copy All" actions are excluded)
Saved Accounts Vault	Account name, website URL, username/email, password, category/tag, and notes — in plaintext	When you tap Save Account
Custom categories/tags	Any category name you create from the Vault's Add/Edit form	When you create a category that doesn't already exist
App preferences	Default length, character-type toggles, default Smart Password mode	Only while "Remember my preferences" (Settings) is turned on

All of the above stays on your device. Uninstalling KeyPilot removes all of it, since Chrome deletes an extension's local storage along with the extension itself.

4. What is never stored

Anything you type that isn't listed in the table above exists only in memory for as long as the popup is open, and is discarded the moment you close it. This includes:

Any password you type or paste into the Checker screen (Check or Compare mode).
Any name, nickname, or words you type into Smart Password.
Any custom word you type into the Tools → Username Generator.

None of this is ever written to storage, logged, or transmitted anywhere.

5. Permissions

KeyPilot's manifest requests exactly one permission:

storage — used exclusively for the local data described in section 3, via chrome.storage.local.

KeyPilot does not request host permissions, does not inject scripts into web pages, and cannot read or modify the content of any site you visit.

6. Your control over your data

Clear — one-click buttons remove all Favorites or all Recent Passwords (Tools screen).
Delete — remove a single Saved Accounts Vault entry at any time from its card.
Reset All Settings (Settings screen) — restores every preference to its default. This does not touch Favorites, Recent, or the Vault, so it can't accidentally delete credentials you deliberately saved.
Remember my preferences toggle (Settings) — turning this off stops future preference-saving and clears what's already saved. It intentionally does not affect Favorites/Recent/Vault, since those are saved by an explicit, separate action.
Uninstall — removing the extension from Chrome deletes all of its local storage, with nothing left behind anywhere.

7. Security

All randomness used for password generation comes from the Web Crypto API (crypto.getRandomValues), never Math.random. Locally stored data relies on Chrome's built-in extension storage sandboxing; KeyPilot does not add its own encryption layer or master password on top of it. The Saved Accounts Vault is intended as a lightweight, convenient local record-keeper — not a hardened, encrypted password manager — so we recommend weighing that when deciding what to store there.

8. Children's privacy

KeyPilot is not directed at children and does not knowingly collect information from anyone, of any age — it doesn't collect information from anyone at all, since nothing it stores ever leaves your device.

9. Changes to this policy

If this policy changes, the updated version will be published at this same URL with a revised "Last updated" date above. Continued use of KeyPilot after a change constitutes acceptance of the revised policy.

10. Contact

Questions about this policy or KeyPilot can be sent to thinxify@gmail.com or via thinxify.com.