Your sessions stay on this device.

Session Vault is a Chrome extension for login isolation. It does not operate a cloud service, does not create accounts, and does not include analytics.

Effective 31 August 2026 · Copyright holder: Mohamad Parsaeifard

What the extension stores

All product data is written by Chrome on the user’s computer. Nothing is uploaded to Session Vault servers — there are none.

Session metadata (names, colors, which site a session belongs to) in chrome.storage.local
Tab-to-session bindings in chrome.storage.session (cleared when the browser restarts)
Cookie jars for isolated sessions in extension IndexedDB
Declarative Net Request rules that exist only for the current browser session

Cookie values are used only to isolate logins you choose. They are not sent to the developer or to any third party.

What we do not collect

No product analytics, crash telemetry, or advertising identifiers
No cloud account, email, or billing inside the extension
No remote fonts or remote scripts in the extension
No sale, rental, or sharing of user data with third parties

Permissions

Session Vault does not request access to all websites at install time. When you isolate a site, Chrome prompts for host access to that site’s registrable domain (including subdomains, so login redirects keep working). You can deny the prompt; isolation will not start for that site.

Sensitive APIs such as cookies, scripting, and declarativeNetRequestWithHostAccess exist only to rewrite Cookie headers for the tabs you bind to a session. They are not used to harvest credentials for any other purpose.

Backups

Encrypted .sessionvault export is designed so the passphrase never leaves the device and is never stored by the extension. Backup UI may not ship in every build; when it does, files are written only where you choose.

How to delete data

Remove a session in the extension to drop that jar. Uninstalling Session Vault deletes extension storage Chrome holds for it. Clearing Chrome profile data also removes it.

Children

The extension is not directed at children under 13, and it does not knowingly collect personal information from children.

Changes

If this policy changes, the date at the top of this page will change. Continued use after an update means the new text applies.

Contact

Questions about privacy or a commercial license: github.com/Mohpfd96