Ward Privacy Policy

Last Updated: Jan 24, 2026

How Ward Handles Your Data

Ward operates in two primary modes: Local Mode and Cloud Mode. The data we handle depends on which mode you are using.

1. Local Mode (requires a graphics card)

In Local Mode, all threat scanning happens directly on your device.

We do NOT collect:

  • Websites you visit
  • Content you scan
  • Browsing history

Everything stays on your computer. No page content is sent to our servers.

2. Cloud Mode

In Cloud Mode, page content is sent to our cloud server for AI-powered threat analysis.

What we send with each scan request:

  • Visible Page Text: The text content visible on the page you are viewing, including text within iframes and ARIA labels. This may include content from emails, social media, banking portals, or any other website you visit.
    Privacy Protection: Before sending, we attempt to locally redact common PII patterns including phone numbers, credit card numbers, SSNs, email addresses, and IP addresses using regex-based pattern matching. However, this redaction cannot catch all sensitive information—names, physical addresses, contextual financial data, and other non-patterned PII will be transmitted.
  • Page URL: The full web address you are scanning.
  • Anonymous Token: A cryptographic blind signature token for authentication. This token is unlinkable to your identity—we cannot correlate scan requests to your Installation ID or email address.

What we do NOT send with scan requests:

  • Your Installation ID
  • Your email address
  • Browser or device information

How we process it:

  • Content is processed transiently by our AI models to detect phishing and scam threats.
  • Page content is not stored permanently and is discarded after analysis.
  • We cannot reverse-engineer scan traffic to identify which user submitted it.

Installation & Account Data

Installation ID

A randomly-generated identifier created when you first install Ward.

When it's sent:

  • During initial extension registration (on install)
  • When requesting new authentication tokens (periodically, for quota management)
  • When you sign in with Google (linked to your email at that moment)

When it's NOT sent: During routine page scans. Scan requests use anonymous blind signature tokens that cannot be linked back to your Installation ID.

Email Address (Optional)

Collected only if you choose to sign in with Google.

When it's sent:

  • Once, during account registration/sign-in

Why we collect it:

  • To create and manage your account
  • To enable premium features and higher scanning quotas
  • To provide customer support
  • For optional newsletter subscription

Device & Browser Information

We collect basic device metadata only during registration events (install, sign-in):

  • Browser type (Chrome or Edge)
  • Operating system (Windows, Mac, Linux)
  • Extension version number

This information is used to understand our user base, debug issues, and prioritize platform support. It is not sent with routine scan requests.

Redaction Limitations

We want to be transparent about what our redaction system can and cannot do:

What we redact (regex pattern matching):

  • Credit card numbers
  • Social Security Numbers
  • Phone numbers
  • Email addresses
  • IP addresses

What we cannot reliably redact:

  • Names (yours or others mentioned on the page)
  • Physical/mailing addresses
  • Financial figures in context (e.g., "balance: $5,000")
  • Medical information
  • Private message content
  • Any PII that doesn't match a strict numeric/format pattern

If you require complete privacy, use Local Mode, which keeps all data on your device.

Website Analytics

We use Google Analytics on our website (tryward.app) to understand visitor behavior.

What we collect:

  • Pages visited and time spent
  • Button clicks and navigation patterns
  • Device type and browser information
  • General geographic location (city/country level)

This is separate from the extension—analytics only apply to the tryward.app website, not your browsing activity.

Your Control

  • Use Local Mode: Keep all scanning on-device with zero data transmission.
  • Sign-in is optional: Ward works fully without an account.
  • Revoke access: Remove Google Sign-In access anytime via your Google Account settings.
  • Data Deletion: Request deletion of your account data by emailing support@tryward.app.

Contact

Questions or concerns? Email support@tryward.app

Ward protects your privacy while protecting you online.

Ward is provided "as is" without warranty of any kind. By using Ward, you agree that Ward and its creator are not liable for any damages or losses.