EVSD Login Guard — Privacy Policy

Last updated: 2026

EVSD Login Guard is a browser extension built by East Valley School District IT to warn staff and students when a password field appears on a page that is not a recognized district, Google, or Microsoft sign-in domain, in order to prevent credential theft from phishing pages.

What this extension does

The extension's content script runs on web pages to check for the presence of a password field. If one is found, it checks the page's hostname and the visible text near the password field against a list of known-safe domains and district brand keywords. If the page does not match, a warning banner is shown to the user.

What data is accessed

• Website content: The extension reads visible text near a detected password field (to check for district branding/instructions) and checks the page's hostname. This happens entirely within the user's browser.
• Password fields: The extension only checks whether a password-type input exists on the page. It never reads, stores, or transmits the actual value typed into any field.

What data is NOT collected

This extension does not collect, store, or transmit personally identifiable information, health information, financial information, authentication credentials, personal communications, location data, browsing/web history, or user activity (clicks, keystrokes, etc.). All processing happens locally in the browser and is never sent anywhere — this extension has no server component and makes no network requests.

Storage

The extension reads a configuration (an allow-list of safe domains and keywords) that is pushed by East Valley School District IT via Chrome enterprise policy (chrome.storage.managed). No user data is written to this storage.

Data sharing

This extension does not sell, share, or transfer any data to third parties. It has no analytics, advertising, or tracking components of any kind.

Contact

Questions about this extension or policy can be directed to East Valley School District IT.