HVSecrets does not collect, sell, or transmit user data to the add-on developer.

The extension processes login form data locally in the browser to provide credential fill and save prompts. Saved credentials are sent only to the HashiCorp Vault server configured by the user. The extension stores configuration and authentication state in browser extension storage.

The extension may read page URLs and login form fields on visited sites in order to detect login forms, offer saved credentials, and save or update credentials. Vault tokens are used only by the extension background script to communicate with the configured Vault server.

No analytics, tracking, advertising, or third-party telemetry is included.