GuardSmith Shield privacy policy
Last updated 4 November 2026 · Publisher: ScriptSmith (contact: scriptsmith.tools@outlook.com)
Summary
GuardSmith Shield collects no personal data. It has no accounts, analytics, advertising, tracking pixels or remote code, and it sells or shares nothing.
What is stored, and where
Only your settings and lists, kept in your browser's local extension storage on your device. They never leave it, and they are deleted when you uninstall the extension.
- Downloaded copies of the public phishing lists (IndexedDB) and when they were last updated.
- Sites you check are not saved or logged.
Network requests
To do its job, the extension sends requests straight from your browser to these public services. None of the requests contain an identifier for you, and ScriptSmith runs no server that sees them:
- GitHub raw content (raw.githubusercontent.com): the MetaMask eth-phishing-detect and ScamSniffer lists, downloaded about every 12 hours. Website checks happen locally against these lists, so the sites you visit are never sent anywhere.
- GoPlus Security (api.gopluslabs.io): only when you check a wallet or token address, that address is sent to get its risk data.
Those services receive standard request data (such as your IP address) under their own privacy policies.
Links
The extension shows links to ScriptSmith pages (ChainHop, Solswift, GuardSmith, Premium). They only open when you click them. The extension never changes, rewrites or injects links into other websites.
Changes and contact
If this policy changes, we will update this page and the extension's store listing. Questions: scriptsmith.tools@outlook.com or our support Discord.