What Keenshield sees, and what it does with it.

Last updated November 5, 2026

Keenshield is a browser extension and website that show how risky a web page or document is likely to be for you. This policy covers both. We've written it to be read, not skimmed past.

The short version

Keenshield never blocks pages or pops anything up. It shows a number on its icon.
On ordinary pages, the extension sends only the page's address — never its text.
Page text is only sent for analysis on pages that ask you to agree, pay, subscribe, sign up or share personal details — and it isn't stored.
To score a company, Keenshield's own server reads that company's public pages itself. Nothing about you is stored with that score.
We don't sell or share your browsing, show ads, or take money to change a score.

What the extension reads

On every page, the extension sends the web address to Keenshield's server, which checks it for warning signs such as lookalike domains, raw IP addresses, or a missing secure connection. On ordinary pages, the address is the only thing sent. The page's text stays in your browser.

On pages that look like a decision — a checkout, sign-up, subscription, terms or payment page — it also reads the page's visible text and whether the page has password, payment or "I agree" fields. It does not read what you type into those fields.

How a company gets its site score

The number on the shield also reflects the company behind the site, not just the page you're on. To work that out, Keenshield's server visits the company's own public pages itself — its homepage and, where they exist, pages like its terms, privacy policy, refund policy, cancellation and pricing pages. It reads at most six pages, the same pages anyone can open without signing in, and identifies itself as "KeenShieldBot". It never uses your browser, your cookies or your login, so it never sees what you saw.

That text is analyzed by Claude (see below) and not kept. Each company is scored at most once every 30 days and the result is shared with everyone. The score is about the company. Nothing about you — not your address, your network address or the fact that you visited — is stored with it.

What is sent, and to whom

For decision pages, the page address (without anything after a "?" or "#") and up to 8,000 characters of visible text are sent to Keenshield's server, which runs on Netlify. The text is analyzed by Claude, an AI model made by Anthropic. Anthropic does not use data sent through its commercial API to train its models by default.

When you use the scanner on our website, the text or photo you provide is sent the same way (up to 60,000 characters with Pro or a single scan). Photos are resized in your browser before upload, which also removes hidden location data.

What we keep

Site scores and their history. For each company's site (for example "example.com"), we keep its score, the reasons, a short summary, which of its public pages were read, when it was scored and how many times the score has been shown. When a page or site score is created or changes, we add a line to a score history (the address or site, the score and its main reason, and the date) so past scores are never lost. None of this records who looked.
Page scores. For each scored page, we keep the score, the reasons, a short summary and the page's address without query strings — so the next visitor gets the same answer instantly. We instruct the AI not to include personal details in these. We keep a fingerprint (hash) of the page text to tell when the page changes, but never the text itself.
An install or browser ID. A random ID created when you install the extension, or kept in your browser when you use our website's scanner, used only to count your free scans. It isn't linked to your name or email. If you're signed in, your website free scans are counted on your account instead, under a scrambled (hashed) form of your email.
Abuse counts. A count of requests per network (IP) address over the last hour, used only to stop abuse, and replaced as the hour rolls over.
Your email, if you give it. If you join our list, we keep your email and use it only to tell you when the Keenshield extension is available.
Business enquiries. If you use the "For businesses & researchers" form, we keep what you send (name, email, company, role, interest and message) and use it only to reply to you. Keenshield's index scores businesses and websites, never people, and we never sell personal data.
Your account, if you make one. Your email and a password (stored by our sign-in provider, never readable by us), whether you have Pro, how many single scans you have left, and the Stripe customer and subscription IDs that link your account to your payments.
Payments. Stripe handles checkout. Your card details go to Stripe, not to Keenshield, and are covered by Stripe's privacy policy.
Server logs. Our hosting provider keeps routine technical logs for a limited time for security and troubleshooting.

What we never do

Sell, rent or share your browsing history or personal information.
Show ads or use affiliate links in the extension.
Let a business pay to raise or lower its score. A score only changes when the page or the company's own pages change.

Your choices

You can uninstall the extension at any time, which stops all collection. To remove your email from our list or ask a question about your data, email privacy@keenshield.app.

Changes

If we change what Keenshield collects, we'll update this page and the date at the top before the change takes effect.