Last updated: 28 September 2026 · Version 1.0
The short version: Warden is a privacy tool, so it collects as little as possible. Your browsing data, subscription list, AI key and form details stay on your device — we can't read them. The only data that reaches us is what's needed to verify a paid license and process payment. We never sell your data.
Please note: this policy is provided in good faith but is not legal advice. If you operate Warden as a business, have a qualified privacy lawyer review it for your jurisdiction before you rely on it.
Warden ("Warden", "we", "us") provides the Warden browser extension for Chrome, Edge, Firefox and Safari. For privacy-law purposes we are the data controller for the limited data described below. Contact: privacy@warden.app.
[Operator: replace with your legal entity name and registered address before launch.]
Stored only in your browser's local extension storage and never transmitted to Warden:
The AI Assistant is off until you enable it and add your own API key. When you ask it a question about a page, Warden reads the visible text of that page and sends it, with your question, directly from your browser to the AI provider you chose (OpenAI or Anthropic) so they can answer. This content is processed under that provider's privacy policy and terms — not ours — and it does not pass through Warden's servers. Warden asks for your explicit consent inside the extension before the first time it does this. Don't use the AI Assistant on pages containing information you are not comfortable sending to your AI provider.
We rely on these third parties only for the purposes shown:
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe | Payment processing for Pro | Card & billing data (held by Stripe), subscription status |
| OpenAI / Anthropic | AI Assistant answers — only if you enable it | Page text + your question + your own API key |
| Our hosting provider | Runs the licensing server | License keys and subscription status |
If you are in the EEA/UK you have the rights to access, correct, delete, restrict, port, and object to processing of your data, and to lodge a complaint with your supervisory authority. Because most data is on your device, you can exercise many of these rights directly by clearing the extension's data; for license/billing data, contact privacy@warden.app.
We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. California residents may request access to or deletion of personal information we hold (limited to license/billing data) by emailing privacy@warden.app. We will not discriminate against you for exercising these rights.
Our providers (Stripe, OpenAI, Anthropic, hosting) may process data in the United States and elsewhere. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers.
On-device data lives until you clear it (remove the extension or clear its storage). License/billing records are kept while your subscription is active and for as long as needed for legal and accounting purposes, then deleted. You can request deletion of your license record at privacy@warden.app.
License tokens are cryptographically signed (Ed25519); payment data is handled by Stripe under PCI-DSS; we minimize the data we collect. No method is perfectly secure, but we design to hold as little as possible.
Warden is not directed to and may not be used by children under 13 (or the minimum digital-consent age in your country, up to 16 in parts of the EEA). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
If we update this policy we will change the date above and, for material changes, notify you in the extension.