PII Fortress Chrome extension security report

PII Fortress protects your browser the moment you install it — no configuration, no account, and no compromises. It automatically rejects cookie consent banners, blocks 63,509 tracker and ad network requests, strips tracking parameters from every URL you visit, and shields your browser fingerprint from cross-site profiling. All processing happens locally on your device. Nothing is collected, uploaded, or shared. Guard is free forever. Sentinel ($5.99/mo) and Vault ($9.99/mo) unlock deeper blocking, breach monitoring, and intelligence tools for users who want full control. Also available on Microsoft Edge — including limited iOS support via Edge mobile. 🛡️ GUARD — FREE FOREVER ──────────────────────────────────────── Every user gets Guard at zero cost — no trial, no expiry, no feature degradation over time. Guard is a complete baseline protection stack on its own. AUTO COOKIE CONSENT REJECTION Tired of clicking “Reject All” on every website you visit? PII Fortress handles it automatically. We support 22+ Consent Management Platforms (CMPs) including OneTrust, Cookiebot, TrustArc, Quantcast, Didomi, Sourcepoint, and more — covering the vast majority of GDPR and CCPA consent banners you encounter in daily browsing. Rejection happens at document_start, before the banner even renders on screen. You’ll stop noticing cookie popups entirely. REAL-TIME TRACKER BADGE The extension icon updates in real time with a count of trackers detected on the current page. One glance tells you exactly how much surveillance a site is attempting — no need to open the popup. STATS DASHBOARD Your personal privacy scoreboard. PII Fortress tracks cumulative stats across every browsing session: total trackers detected, consent banners auto-rejected, and tracking links cleaned. Everything is stored on your device — never uploaded, never shared, never monetized. Reset any time with one click. REAL-TIME PRIVACY SCORE Every page you visit gets scored from 0 to 100 based on tracker density, cookie compliance status, and other risk signals. The score updates live as the page loads. All computation happens locally — no data leaves your machine to produce the score. BROWSER CLEANUP One-click removal of browsing history, cookies, cache, download records, form data, and local storage — with configurable time ranges from the last hour to all time. Clean up after a sensitive browsing session without navigating Chrome’s multi-step settings flow. Cleanup boosts your privacy score temporarily as a visual confirmation. Available on all tiers, including Guard.   🔐 SENTINEL — $5.99/MONTH ──────────────────────────────────────── Sentinel adds network-layer blocking, fingerprint protection, and granular consent control for users who want deeper command over their browsing. TRACKER BLOCKER — 63,509 RULES PII Fortress enforces 63,509 declarativeNetRequest rules drawn from three industry-standard blocklists: EasyList (30,000 ad rules), EasyPrivacy (30,000 tracker rules), and Peter Lowe’s Blocklist (3,500+ malware/ad domain rules). Third-party ad scripts, analytics beacons, pixel trackers, and surveillance SDKs are blocked at the network layer before they ever reach your browser. Because blocking is handled by Chrome’s own engine via declarativeNetRequest, there is zero JavaScript overhead on your pages — sites actually load faster. TRACKING LINK CLEANER Every link you click or share gets cleaned before the request goes out. PII Fortress strips 50+ known tracking parameters — including utm_source, utm_medium, utm_campaign, fbclid, gclid, msclkid, mc_eid, igshid, and dozens more — from URLs in real time. Ad networks can’t track which campaigns sent you to a site, and the links you share don’t leak your identity or origin. FINGERPRINT SHIELD Browser fingerprinting is a tracking technique that doesn’t need cookies. Sites fingerprint you by combining Canvas rendering output, AudioContext characteristics, WebGL renderer strings, font metrics, and dozens of other browser properties into a near-unique identifier that persists across sessions and private browsing windows. PII Fortress injects calibrated, per-session noise into the Canvas API, AudioContext API, and WebGL API — making your fingerprint appear different to each site without breaking the sites you visit. CUSTOM CONSENT CATEGORIES Go beyond blanket “reject all” behavior. For any site, define custom consent rules that allow specific cookie categories (e.g. “functional only”) while rejecting the rest. PII Fortress applies these rules automatically every time you visit that domain — no more navigating multi-step GDPR preference centers. COOKIE JAR Save and restore your full cookie consent state for any site. Useful for sites that reset your preferences after cookie expiry or after clearing browser data. Saved profiles are stored locally and never uploaded. SCAM SCANNER Check any URL against Google Safe Browsing’s malware, phishing, and unwanted software databases — one click from the extension popup. No data is transmitted unless you choose to initiate a scan. Results are shown instantly.   🏰 VAULT — $9.99/MONTH ──────────────────────────────────────── Vault adds intelligence tools for users who want full visibility into their exposure — not just protection, but active awareness and monitoring. PRIVACY HEATMAP Visualize tracker activity across all the sites you visit. The heatmap highlights which domains are most aggressive in attempting to track you, giving you actionable data to decide which sites to avoid, restrict, or whitelist. DNS LEAK DETECTION If you use a VPN, PII Fortress can verify that your DNS queries are actually routing through it — not leaking to your ISP. A DNS leak means every hostname you visit is visible to your internet provider, regardless of your VPN. PII Fortress detects this and alerts you immediately. BREACH MONITOR Queries Have I Been Pwned (HIBP) — the most comprehensive public breach database — to check whether your email address has appeared in any known data breaches. Configure monitoring frequency (daily, weekly, or monthly) and receive Chrome notifications when new breaches are detected. Included in your Vault subscription, no separate API key needed. Your email is transmitted only to perform the check and is never stored. PASSWORD BREACH CHECK Check whether a password has been exposed in a known breach using HIBP’s k-Anonymity model. Only the first 5 characters of the SHA-1 hash are ever sent to the API — your actual password never leaves your device. Results show exactly how many times that password appears in known breach datasets. SCHEDULED SITE SCANS Set up recurring audits on any URL. PII Fortress uses Chrome’s alarms API to run scans on a schedule you define, then sends a notification if new trackers appear or the score changes significantly. Ideal for monitoring financial institutions, health portals, and news sites for unexpected changes in their tracking behavior. PROMPT INJECTION DETECTION AI tools are increasingly embedded in websites and web apps. Prompt injection is a technique where hidden instructions in page content attempt to manipulate AI assistants into leaking data, executing commands, or producing harmful output. PII Fortress scans page content for known prompt injection patterns and alerts you when they’re detected — protecting you from a class of attack that traditional blockers don’t address.   🔒 PRIVACY ARCHITECTURE ──────────────────────────────────────── PII Fortress is built around one principle: your data belongs on your device. •All settings, stats, license keys, Cookie Jar profiles, and consent rules are stored in chrome.storage.local — never synced or transmitted. •No analytics SDK, no crash reporter, no A/B testing framework, and no telemetry of any kind. •The only outbound requests PII Fortress makes are ones you explicitly trigger: Google Safe Browsing (Scam Scanner), HIBP (Breach Monitor / Password Check), and your payment processor (Upgrade). •declarativeNetRequest blocking runs entirely within Chrome’s own engine — the extension never sees the content of your requests. •No account is required for any tier, including paid tiers. License keys are derived locally from your payment transaction — we maintain no user database. 🤝 WORKS ALONGSIDE YOUR EXISTING TOOLS ──────────────────────────────────────── PII Fortress complements other privacy tools — it doesn’t compete with them. If you already use uBlock Origin Lite, Privacy Badger, or another MV3 blocker, PII Fortress adds capabilities they don’t offer: automatic cookie consent rejection, browser fingerprint shielding, breach monitoring, DNS leak detection, prompt injection detection, and a unified privacy score. Install it alongside what you already have. 💳 PAYMENT OPTIONS ──────────────────────────────────────── Card and crypto are both supported — because a tool built for privacy shouldn’t force you through a single centralized payment platform. •Card / Apple Pay — via Stripe’s secure hosted checkout. •Crypto — USDC or USDT via MetaMask (Ethereum) or Phantom (Solana), or RLUSD via Xaman (XRP Ledger). Pay directly from your wallet, no exchange account needed. Individual plans: Monthly, quarterly (save 10%), or annual (save 17%). Cancel any time. Family plans: Share one license across up to 5 household members at a discounted rate. Lifetime plans: Available via crypto payment — one-time purchase, permanent access. ⚙️ TECHNICAL DETAILS ──────────────────────────────────────── •Built on Chrome Manifest V3 — the latest and most secure extension platform standard. •Blocking rules use declarativeNetRequest, not webRequest — no access to request content, fully sandboxed from your browsing data. •Consent interception runs at document_start in the MAIN world, ensuring TCF/CCPA/GPP stubs are in place before any publisher script executes. •Content scripts use MutationObserver with automatic disconnection after page load to minimize ongoing CPU impact. •Canvas/Audio/WebGL noise includes early exit guards for large canvases (maps, video players) to prevent performance degradation. •Browser data cleanup uses the chrome.browsingData API to safely remove history, cookies, cache, downloads, form data, and local storage within user-specified time ranges. •Open billing: full pricing, terms, and privacy policy published at pii-fortress.com.   ❓ FREQUENTLY ASKED QUESTIONS ──────────────────────────────────────── Q: Does PII Fortress slow down my browser? A: Network blocking uses declarativeNetRequest, which runs inside Chrome’s own engine with zero JavaScript overhead. In practice, most users experience faster page loads because ad and tracker requests are eliminated before they consume bandwidth. Q: Will it break websites? A: Occasionally, aggressive blocking can interfere with a site’s login flow or functionality. PII Fortress includes a per-site whitelist so you can instantly disable protection for any domain where it causes an issue. Q: Is Guard really free forever? A: Yes. No trial period, no feature degradation, no nag screens. It is the permanent free tier. Q: What happens if I cancel my subscription? A: The extension reverts to Guard — all free features remain active. Your Cookie Jar profiles and consent preferences are retained locally in case you resubscribe. Q: I paid with crypto — how do I get my license key? A: Your key is derived automatically from your payment transaction hash. Once the transaction confirms on-chain, the extension generates your key locally and activates your tier — no server interaction required. Q: Does PII Fortress work on other browsers? A: PII Fortress is built for Chromium-based browsers — Chrome, Brave, Edge, and Opera. It is also available on the Microsoft Edge Add-ons store, which provides limited iOS support via Edge mobile (ad blocking, cookie consent, link cleaning). A Safari Web Extension for iOS is on the roadmap. Firefox is also under consideration. Q: What works on Edge iOS? A: Core Guard features work on iPhone via Edge: ad/tracker blocking, cookie consent rejection, cosmetic filter hiding, tracking link cleaning, and privacy score. Advanced features that depend on service workers (breach monitoring, scam scanner, DNS leak detection, browser cleanup) require the desktop version. 📬 SUPPORT ──────────────────────────────────────── Questions, issues, or feedback: support@pii-fortress.com Privacy policy: https://pii-fortress.com/privacy Website: https://pii-fortress.com