Prakni — Privacy Policy

Last updated: 15/08/2026

Prakni is a browser extension that detects phishing emails in Gmail and Outlook. All analysis runs locally on your device. Your email content is never sent to any server. This policy explains exactly what data we handle, what is stored locally on your device, and what (if anything) leaves it.

What We Analyze

Prakni examines the sender address, subject line, body text, and links within your emails to identify phishing indicators such as brand impersonation, lookalike domains, and social engineering patterns.

✅ Every bit of analysis happens inside your browser. Nothing is sent to our servers or any third party.

What We Never Transmit ZERO TRANSMISSION

The following is never transmitted off your device to any server, API, or third party:

Email body text or content
Full email subject lines
Recipient information
Attachments or file contents
Any personally identifiable information (PII)

We do not operate servers that receive, process, or store your email content. The detection engine runs entirely within your browser's JavaScript environment.

Transmitted vs. stored: "Never transmitted" means this data never leaves your device. Some detection-related information is stored locally on your device only (see the next section) so the extension can show you your recent threats and remember your preferences. Local storage never leaves your browser.

What Is Stored on Your Device

Prakni stores the following in your browser's local storage (chrome.storage.local) — on your device only, never transmitted, never synced to any server:

Your trust preferences

Trusted domains, safe contacts, and reported senders that you add.

Recent threats (local threat history)

When Prakni flags an email as Suspicious or High Risk, it records a small, capped local history so you can review recent detections in the dashboard. Each record contains:

the sender's email address,
a short subject excerpt (the first ~30 characters of the subject),
the reasons the email was flagged,
the flagged link, if any (with tracking parameters removed).

This history is capped at the most recent 20 threats per email provider and is stored separately for each provider (Gmail and Outlook). It exists solely to populate your local dashboard and inbox indicators. It is never transmitted.

Activity statistics

Counts only (emails scanned, threats detected, emails you marked safe), kept separately per provider.

Settings

Protection on/off, inbox-row scanning on/off, and cached interface configuration for Gmail/Outlook compatibility.

🔒 All of the above stays in your browser. It is not synced, uploaded, or backed up to any server. Clearing the extension's data, or uninstalling it, deletes everything.

Permissions We Use

Prakni requests the minimum permissions needed to function:

storage — to save your preferences, local threat history, and settings on your device.
alarms — for internal scheduling of local housekeeping tasks.
activeTab — to detect which email provider you are currently viewing (Gmail or Outlook) when you open the extension, so the popup shows the right information. This grants temporary access to the current tab's address only when you invoke the extension; it is not used to browse or track your activity.

Prakni requests no broad host permissions and performs no background browsing.

What Is Transmitted

Current version:

Nothing. The extension operates entirely offline. There are zero network requests to any external server. All detection logic and configuration are bundled with the extension.

Planned for future versions:

Future updates may introduce optional features that transmit minimal, non-identifying data. If and when they do, this policy will be updated first and the extension will request your consent where appropriate:

Anonymous telemetry — event type and extension version only (no email content, no user identity)
URL reputation checks — query-stripped URLs only, and only when you explicitly choose to check (never automatic)
Interface configuration updates — to maintain Gmail/Outlook compatibility when those services change their layout

Third-Party Services

The current version uses no third-party services. No data is sent to any external API, analytics platform, advertising network, or data broker.

Data Sharing

We do not sell, rent, share, or transfer any user data to third parties. Data stored locally on your device is never shared because it never leaves your device.

Data Retention

All data is stored locally on your device. The local threat history is automatically limited to the most recent 20 entries per provider; older entries are discarded. Clearing the extension's data or uninstalling Prakni removes all locally stored preferences, history, and settings permanently.

Children's Privacy

Prakni does not knowingly collect any data from children under 13. Since the extension transmits no data from any user, no special provisions are necessary.

Your Rights

Since all data stays on your device, you have full control:

Access: Open the Prakni dashboard to see your stored preferences and recent threat history at any time.
Deletion: Remove individual entries from the dashboard, clear the extension's data via your browser's settings, or uninstall the extension.
Portability: Your data is already in your browser — you have it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by an updated date at the top of this page. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or Prakni's data practices, reach out to us:

KanthiraLabs

support@kanthira.com