Sign-in Guard Privacy Policy
Humorless Labs LLC · Effective October 3, 2026
Sign-in Guard is a Microsoft Edge extension that an administrator (usually a family member) installs and configures for someone they look after. It stops that person from entering a password, card number, Social Security number or one-time code on a website outside a list the administrator sets, blocks common scam-page tricks, and cancels downloads of programs.
In short: the extension works inside the browser. It sends nothing anywhere unless the administrator connects it to a guard server, and then it sends only the few items listed below, to that server only. Nothing is sold, used for advertising, or shared for analytics.
What the extension looks at, inside the browser
- The hostname of each page and frame, to compare it with the administrator's list.
- Attributes of form fields (type, name, autocomplete, placeholder, label) to recognise a password, card, SSN or code field. It never reads what is typed into any field.
- The file name and source address of each download, to recognise programs and scripts.
It does not read page text, cookies, saved passwords, browsing history or the contents of any form.
What it stores in the browser
- A copy of the administrator's list of allowed sites from the guard server, if one is configured, so it keeps working offline.
- The last 50 blocked downloads (file name, time, source site).
- Which tabs the administrator has unlocked, until those tabs close.
The administrator's own settings arrive through Microsoft Edge policy and can be viewed at
edge://policy.
What it sends, and only when a guard server is configured
| When | What is sent to the guard server |
|---|---|
| The user presses "Request access" | The site's hostname, the page path without its query string, and the kind of field (password, card, SSN or code). Never what was typed. |
| A program download is blocked | The file name and the hostname it came from. |
| Every 15 minutes | A request for the current list of allowed sites. Nothing about the user is sent. |
The guard server's address and access credentials are set by the administrator in Edge policy. Without them, the extension makes no network requests of its own.
Who receives it and how long it is kept
The guard server belongs to the administrator who configured it, and only that administrator can see these records. Where Humorless Labs runs the guard server for a family it supports, the server is hosted on Cloudflare, reached over HTTPS, and protected by Cloudflare Access so that only the extension and the administrator can reach it. Records of answered unlock requests and blocked downloads are deleted automatically after 90 days; an unanswered request is kept until the administrator answers it.
Data is never sold, rented or shared with anyone else, and is never used for advertising, profiling or analytics. Cloudflare processes it only as the hosting provider.
Your choices
- The administrator controls every setting through Edge policy and can remove the extension at any time.
- If you installed the extension yourself, removing it from
edge://extensionsdeletes everything it stored in the browser. - To see or delete records held on a guard server Humorless Labs runs, email ops@humorlesslabs.dev.
Children
Sign-in Guard is not directed at children under 13 and does not knowingly collect their information.
Changes
If what the extension collects changes, this page will be updated before the new version is published, and the effective date above will change.
Contact
Humorless Labs LLC · ops@humorlesslabs.dev