Buddy collects nothing, transmits nothing, and has no server.

What the extension stores

Two small pieces of state, in your browser profile only:

• The pairing secret the Buddy desktop app issues when you approve this extension.
• The list of sites you have paused Buddy on.

Session state — the active autofill session, the single-use token for a fill in
progress, and any credential waiting on your answer to a "Save login?" prompt —
is held in memory and discarded when the browser closes.

No passwords, card numbers, or other vault contents are ever written to
persistent storage.

Where vault data goes

Vault values move between the Buddy desktop app and the page you chose to fill,
over a native messaging connection on your own computer. They do not travel over
the network, and no server of ours is involved at any point.

What we receive

Nothing. There is no account, no telemetry, no analytics, and no crash
reporting. We cannot see which sites you visit, which logins you hold, or
whether you use the extension at all.

Third parties

None. The extension contacts no host other than the com.brandnewbyte.buddy
native messaging host on your own machine.

The desktop app

The Buddy desktop application is a separate product and has its own privacy
policy at pwbuddy.com/privacy.

Questions

support@pwbuddy.com