Privacy Policy

Last updated: 2026-11-07 · Product: SignupMap (记得住)

SignupMap is a browser extension that matches the site you are visiting against an account list stored on your device. This page explains what we do — and do not — do with data.

1. Core principle

We operate no backend server for the extension. There is no SignupMap account system that receives your password vault or account list. Matching happens locally in the browser.

2. What is stored, and where

Imported or manually added account records (domain, username, optional notes; passwords only if you choose to store them) live in chrome.storage.local on your device.
Optional passphrase encryption uses on-device cryptography (AES-GCM). We cannot recover a forgotten passphrase.
Settings (overlay on/off, muted sites, etc.) are stored locally the same way.
Uninstalling the extension removes this data from the browser profile (per browser behavior).

3. Network requests

Zero account-related network requests from the extension’s matching path: your browsing URLs and account list are not uploaded to us for matching.

We do not use third-party favicon proxies that would reveal every domain you visit. Icons are read from the page itself and cached locally, or replaced with a generated tile.
We do not run analytics SDKs or crash reporters that send your browsing data to SignupMap.
Optional security checks inside the extension (for example Have I Been Pwned / Pwned Passwords, or a reachability probe) contact third parties only when you click those checks. Matching itself does not need the network.
Optional tools on this website are separate from the extension’s matching behavior and will say so before you submit anything.

You can verify extension matching with Chrome DevTools → Network while browsing, and by testing offline.

4. Permissions

storage — local account list and settings.
tabs — read the URL of the current tab for domain matching.
Host access — show the on-page marker on websites you visit. We do not use this to scrape page content for upload.

5. Payments

If you buy Pro, payment is processed by a third-party provider (for example Stripe). They process card details under their own policies. We do not need your account CSV to complete a purchase; licensing is separate from vault data.

6. What we do not do

No sale of account lists or browsing history (we do not receive them).
No Gmail/inbox OAuth scanning.
No claim to list every app registered to a phone number.

7. Children

SignupMap is not directed at children under 13.

8. Contact

Questions: [email protected]

Chrome Web Store listing: linked from signupmap.com after publication.

This policy covers the SignupMap extension and signupmap.com marketing pages. Third-party sites you visit remain under their own policies.