Paneward

Paneward Privacy Policy

Effective date: 2026-09-24 · Applies to: Paneward browser extension version 1.0.0.

Paneward ("Paneward", "we") is a browser extension developed by bhavik.id (https://bhavik.id/). It places a privacy curtain over your normal web pages until you unlock it with your password or PIN. Paneward is designed to prevent casual access to your normal web browsing session when you step away. It is not a replacement for your operating system's user account or screen lock.

Summary

1. Data stored on your device (local mode)

Paneward saves the following in your browser's extension storage (chrome.storage), inside the Chrome profile where it is installed. It is not sent to us or to anyone else.

Data Why Form
Password or PIN verifier To check your password or PIN when you unlock Salted PBKDF2-HMAC-SHA-256 hash (600,000 iterations). Never the password or PIN itself.
Recovery key verifier To let you reset a forgotten password or PIN Salted PBKDF2 hash. Never the recovery key itself.
Lock state Whether the browser is locked, why, and since when e.g. "locked, after inactivity, 10:42"
Settings Your auto-lock, startup-lock and theme choices Plain values
Failed-attempt counter To apply the wait after repeated wrong attempts A count and timestamps
Usage counters To decide whether to show the optional rating prompt Install date, number of locks/unlocks, dates the prompt was shown or dismissed

Your password or PIN is entered only on Paneward's own extension pages (the toolbar popup or the Paneward unlock window), never into a web page.

Deleting this data: removing the extension from Chrome deletes all of it.

2. Access to web pages

To show the privacy curtain, Paneward needs permission to run a small script on normal web pages (http:// and https://). Chrome describes this as "Read and change all your data on all websites". The script only draws and removes the curtain and blocks input to the page while it is locked. It does not read or store page text, images, form contents, passwords typed into websites, keystrokes, cookies, URLs or titles, and it does not send anything anywhere.

3. What Paneward never collects

4. Sharing

We do not sell or transfer your data to third parties. We do not use or transfer data for advertising, for determining creditworthiness, or for any purpose unrelated to Paneward's single purpose. No human at bhavik.id reads your data.

Chrome Web Store Limited Use: the use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

5. Security

Credentials are hashed with PBKDF2-HMAC-SHA-256 and a random salt using the browser's built-in Web Crypto. Repeated wrong attempts trigger increasing waits. The extension contains no remote code. Paneward is designed to prevent casual access to your normal web browsing session when you step away. It is not a replacement for your operating system's user account or screen lock.

6. Children

Paneward is a general-audience utility. It does not knowingly collect personal information from anyone, including children.

7. Your choices

8. Changes

If this policy changes, we will update the effective date above and publish the new version at https://paneward.bhavik.id/privacy/. If a future version collects new kinds of data, we will describe it here and in the Chrome Web Store listing before it ships.

9. Contact

Use the support page at https://paneward.bhavik.id/support/, or the developer contact e-mail shown on Paneward's Chrome Web Store listing.