Local PII Encryption (AES-256-GCM) Detected personal information stored in your local scan history is now encrypted using AES-256-GCM via the Web Crypto API. The encryption key is generated on your device and never leaves it. The entitiesFound (detected PII labels) and the source URL of each scan are stored only in their encrypted form — plaintext is never written to chrome.storage.local. Existing history is automatically migrated to the encrypted format on first run.

Redesigned Interactive Tutorial The tutorial system has been fully rebuilt with two synchronized components:

A floating card on the webpage that walks you through each feature step by step.
A popup spotlight panel that highlights the exact UI element being described inside the extension popup — with a glowing ring, click-blocking overlay, and scroll tracking.
The tutorial now supports keyboard navigation (Arrow keys, Enter, Escape, 1–9 to jump steps), resuming mid-tour if the popup is closed and reopened, and dot-indicator navigation to jump to any step directly.

Blocking Overlay UX Improvements

The "I understand, send anyways" button is now visually disabled (greyed out, cursor: not-allowed) when the Allow Blocking setting is turned off, with a tooltip explaining how to enable it — instead of appearing clickable but non-functional.
A quick-access Settings button (gear icon) has been added directly to the blocking overlay so users can adjust their privacy settings without dismissing the warning.