Privacy Policy

1. Who we are

YANSII ("we", "us", "our") is an AI-assisted security testing Chrome extension created by an independent developer. This policy covers the YANSII browser extension and the yansii.in website.

2. What data we collect

Short answer: almost nothing.

The YANSII extension operates entirely within your browser. We do not operate servers that receive, store, or process your browsing data.

• Extension scanning data — all scan results, findings, patterns, and memory are stored locally in your browser using chrome.storage.local. This data never leaves your device.
• AI copilot data (Pro) — when you use AI features, page context is sent directly from your browser to your chosen AI provider using your own API key. YANSII never sees it.
• Email address — if you subscribe to our waitlist, we collect your email via our email provider and use it only for product updates.
• License key — Pro users receive a license key validated against our licensing provider. We do not receive payment details.

3. What we do not collect

• Browsing history or visited URLs
• Page content, DOM data, or cookies
• API keys or credentials you enter
• Scan results or security findings
• AI conversation history
• Analytics or telemetry from the extension

4. Browser permissions

YANSII requests up to 10 Chrome permissions, each justified by a specific feature. Full justification is at PERMISSIONS_JUSTIFICATION.md in the source.

• activeTab — scan the current tab when you click the icon
• storage — save findings and settings locally
• webRequest — analyze HTTP headers
• cookies — audit cookie security attributes (Pro only)
• scripting — inject content scripts for DOM analysis

5. AI provider data flow

The AI copilot uses a BYOK model. Page context goes directly from your browser to your AI provider using your key. YANSII does not intercept, proxy, log, or cache these calls. Review your provider's privacy policy.

6. Data storage

All extension data is in chrome.storage.local. Clear it by uninstalling or clearing extension storage. Memory patterns use 6-month decay, capped at 500 via LRU.

7. Third-party services

• AI providers (Anthropic, OpenAI, Groq, OpenRouter) — only when you activate the copilot
• Dodo Payments — Pro billing and license keys
• Chrome Web Store — distribution

8. Website analytics

yansii.in may use privacy-friendly analytics (e.g. Plausible) with no cookies and no personal data. No advertising trackers.

9. Children's privacy

YANSII is a professional tool not intended for anyone under 18.

10. Data transfers

We don't transfer your data because we don't have it. AI data flows directly to provider servers, governed by their terms.

11. Your rights

Since we don't store personal data beyond an optional email, exercise your rights by clearing extension storage. To remove your email, use the unsubscribe link or contact us.

12. Changes

Material changes announced via changelog, website, and email. The date at top reflects the latest revision.

13. Contact

• Email: [email protected]
• GitHub: Open an issue