How the ConsentVeil browser extension handles information, written to reflect exactly how ConsentVeil works.
ConsentVeil (the "Extension") is a browser extension published by Safe and Informed S.R.L., a company incorporated in Romania ("Safe & Informed", "we", "us", "our").
This Privacy Policy explains how the Extension handles information. It is written to reflect exactly how ConsentVeil works.
Safe and Informed does not receive, collect, sell or share any personal data from the Extension. The Extension does process data, but only locally: your settings, profiles and site rules are kept and used inside your own browser and never leave it. The Extension makes no network requests of its own and sends nothing to us or to anyone else. There are no accounts, no analytics, no tracking, no advertising, and no cookies set by the Extension.
This Policy applies only to the ConsentVeil browser extension. It does not apply to the Safe & Informed website or other products, or to the websites you visit, each of which is governed by its own terms and privacy policy.
ConsentVeil hides cookie banners on the websites you visit and, depending on your settings, blocks requests to known third-party tracking services. It works passively: it never clicks buttons on your behalf, never uses a website's consent interfaces, and never sends a consent choice to a website. A hidden banner stays unanswered; the Extension does not tell the website that you accepted or refused anything.
To recognise a cookie banner, the Extension's content script looks at the structure of the page you are viewing (for example element positions, sizes and button labels). This happens in your browser, only for as long as the page is open. Nothing about the page is stored or transmitted, except the items you choose to save as described in 3.2.
The Extension stores the following in your browser's local extension storage, on your device only:
Never stored: full URLs, query parameters, page titles or content, form data, passwords, payment information, browsing history, website cookies, or text you type.
This data: - never leaves your device unless you decide to send a report yourself (see 3.4); - is not transmitted to Safe and Informed S.R.L. or to any third party; - remains until you delete it in Settings, or uninstall the Extension.
The Extension does not use storage.sync and does not synchronise data across devices or accounts.
Through the Extension we do not collect, receive, store, or have access to: your identity, email, IP address, browsing history, the websites you visit, page content, analytics or usage statistics, crash reports, advertising identifiers, or any other personal data. ConsentVeil contains no analytics, telemetry, advertising, tracking, or "phone-home" code of any kind, and it does not load remote code.
Missed-banner reports are never sent automatically. If you choose to copy a report and email it to us, or otherwise write to us, we receive your email address and whatever your message contains. We use this only to answer you and to improve the Extension's rules (Article 6(1)(f) GDPR — our legitimate interest in handling your request and maintaining the product), and we keep it only as long as needed for that purpose. For this correspondence only, Safe and Informed S.R.L. is the controller. The correspondence is held in our support mailbox, provided by Zoho Corporation B.V. and stored in the European Union; see section 8 for support access from outside the EU.
Tracker blocking uses the browser's built-in declarativeNetRequest mechanism: the Extension gives the browser a list of rules, and the browser applies them. The Extension does not see, read or log the requests your browser makes.
| Permission | Why it is needed |
|---|---|
Access to websites (http://*/*, https://*/*), optional |
Not requested at install. You choose where ConsentVeil may run — on all sites, on all sites until you close the browser, only on sites you allow, or only when you click — and your browser asks you to confirm. It is used only to hide cookie banners on those pages, and not to collect or transmit page content. In Safari, site access is managed by Safari itself. |
scripting |
To run the banner-hiding script only on the sites you allowed, or once on the current page when you click. |
activeTab |
For "only when I click": access to the page you are viewing, at the moment you click, without broad site access. |
declarativeNetRequest |
To block requests to known third-party tracking services, locally, according to your settings. |
storage |
To keep your settings and rules on your device. |
alarms |
To end temporary exceptions you granted when they expire. |
The facts: the Extension processes information exclusively on your device and transmits nothing to us. We do not receive or access that information and do not determine how it is used beyond providing the software.
What follows from those facts: Safe and Informed S.R.L. neither receives that information nor determines, beyond providing the software, the purposes and means of its processing. You decide whether to install the Extension, which settings and profiles to use and which sites it acts on, and the processing happens on your device only. On those facts we do not consider Safe and Informed S.R.L. to be a controller or a processor for the information the Extension processes on your device; the roles under the GDPR follow from who actually determines the purposes and means of a processing and how the software is used, not from the location of the data alone. Where you use the Extension for purely personal or household purposes, that processing falls outside the GDPR under Article 2(2)(c); where you use it in another capacity, for example on an employer's device under its policies, the person or organisation operating the software is responsible for that use and for its own assessment of the roles. Safe and Informed S.R.L. is the controller for the support correspondence you choose to send us (section 3.4).
ConsentVeil is not a consent management platform and does not manage consent on behalf of any website. Websites remain responsible for their own compliance.
Processing on your device is carried out by you, at your initiative and under your control, to provide the functionality you requested. No such processing takes place on our systems, we receive none of its data, and we rely on no legal basis of our own for it; the person operating the Extension decides whether and how it runs.
The only processing for which we need a legal basis is the support correspondence described in section 3.4, which we process on the basis of our legitimate interest in answering you and maintaining the Extension (Article 6(1)(f) GDPR).
We do not sell, rent, trade or share the data the Extension processes, because it never reaches us. The extension does not transmit browsing history or its local settings to us. If you contact support, we process your address and message under section 3.4 of this policy, with the recipients, retention period and rights stated there. For the purposes of the California Consumer Privacy Act (CCPA/CPRA) and similar laws: we do not sell or share personal information.
Data stored by the Extension stays on your device until you remove it. You can delete everything in Settings › Import and export › "Delete all data", delete individual site rules and reports, or uninstall the Extension — uninstalling removes all data ConsentVeil has stored.
The Extension itself transfers nothing: no data leaves your device through it.
If you write to us, your correspondence is held in our support mailbox provided by Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, The Netherlands) with primary storage in the European Union (zoho.eu region, Netherlands and Ireland data centres). Authorised Zoho personnel in India may access that data for technical support under the Standard Contractual Clauses incorporated into Zoho's data processing addendum and the supplementary safeguards in Zoho's transfer-impact assessment. You may ask us for a copy or a meaningful summary of these safeguards; we provide it subject to legitimate redactions.
The Extension is not directed to children, and as a product it is intended for users aged 13 and over. The digital-consent age under Article 8 GDPR (16, or a lower age set by national law) is not relevant to the Extension, because the Extension does not rely on consent as a legal basis and transmits no information about anyone, including children, to us. We collect no age data through it. The extension does not transmit browsing history or its local settings to us. If you contact support, we process your address and message under section 3.4 of this policy, with the recipients, retention period and rights stated there.
Because the Extension keeps data only in your browser's local storage and transmits nothing to us, the primary protection for that data is the security of your own device and browser profile. The Extension adds no remote attack surface of its own.
The websites you visit are operated by third parties and are subject to their own terms and privacy policies. Hiding a banner does not change what a website itself collects; some websites may set cookies before you answer their banner, and some may limit features when no choice has been made.
Under the GDPR and Romanian data-protection law you have rights of access, rectification, erasure, restriction, portability, and objection regarding your personal data. Because ConsentVeil keeps the data it processes only on your device, you can exercise these directly — by viewing, editing, exporting or deleting the data within the Extension, or by uninstalling it. The extension does not transmit browsing history or its local settings to us. If you contact support, we process your address and message under section 3.4 of this policy, with the recipients, retention period and rights stated there. For that correspondence, write to [email protected].
You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).
We may update this Policy from time to time. The "Last updated" date above will change accordingly, and the current version will always be available at its published URL. Material changes will be reflected in the Extension's store listing.
Safe and Informed S.R.L. Aleea Slt. Adrian Cârstea, Nr. 13, Bl. 37, Sc. 2, Et. 8, Ap. 141, Sector 3, Bucharest, Romania Email: [email protected]