Capsulla Privacy Policy

This policy describes what data the Capsulla browser extension collects and how it's used. It covers Capsulla specifically — for how this website (lockisecurity.com) itself uses cookies and analytics, see our Cookie Policy.

Information Processed Locally, On Your Device

Capsulla inspects clipboard paste content, file uploads, and file downloads against detection rules — credit card numbers (Luhn-verified), IBANs, SSNs, email addresses, phone numbers, AWS access keys, and private keys by default, plus any custom rules you add — entirely inside your browser. This check happens in memory and is never transmitted anywhere. Your rules and settings are stored only in your browser's local extension storage, never synced to a server. Capsulla has no user accounts and no sign-in — nothing you paste, upload, or download is ever seen by us.

Anonymous Product Analytics We Collect

To understand how Capsulla is used and improve it, the extension sends a small number of anonymous analytics events to PostHog (posthog.com), an EU-hosted analytics provider, via a direct request from the extension — no third-party SDK is embedded. These events never include the content of your clipboard, files, or the URLs of pages you visit. Each event includes:

• A randomly generated identifier stored on your device — not your name, email, or any other identifying information.
• Whether the install is a normal install or one managed by organization policy.
• The extension version and your browser's language setting.
• The name of the action taken — for example, that a rule was created, deleted, or triggered (and whether it warned or blocked), that the extension was installed, updated, or is still active, that settings were opened, or that a domain was added to or removed from your whitelist. The rule's content, the domain itself, and file names are never included.

Approximate Location Data

Like most web requests, each analytics event reaches PostHog's servers from your device's IP address. PostHog automatically derives an approximate location (such as country or city) from that IP address as part of its standard processing — Capsulla's own code never reads or transmits your IP address, GPS location, or any other location data directly, but this automatic, coarse geolocation by our analytics provider is part of how the data is processed on their end.

Third Parties

PostHog is the only third party Capsulla shares any data with, and only the anonymous analytics described above. We do not use advertising networks, do not sell or rent data, and do not share data with data brokers.

Permissions We Request

Capsulla requests the minimum browser permissions needed to function:

• Storage — to save your detection rules and settings on your device.
• Active Tab — to interact with the page you're currently viewing when a rule is checked.
• Clipboard Read/Write — the core of Capsulla's clipboard protection: reading what you're about to paste, and rewriting it if a rule masks or blocks it.
• Downloads — to cancel a download that matches a blocked file type.
• Alarms — for a lightweight weekly check-in used only to measure active installs.
• Capsulla does not request broad host permissions — it cannot read or modify arbitrary websites beyond the specific interactions described above.

Data Retention & Deletion

Your rules and settings are deleted automatically when you uninstall Capsulla, and can be cleared at any time from your browser's extension settings. Because analytics events are anonymous and not linked to any identity, we have no way to look up or delete an individual person's analytics history on request.

Children's Privacy

Capsulla is not directed at children under 13, and we do not knowingly collect data from children.

Changes to This Policy

We may update this policy as Capsulla changes. Material changes will be reflected by updating the date below.

Contact Us

Questions about this policy or Capsulla's data practices? Email us at support@lockisecurity.com.

Last updated: July 25, 2026