Privacy policy

Login Pal, provided by metuur, is a Chrome extension exclusively for organizing synthetic test accounts and filling login forms in authorized testing environments. This policy explains the information the extension handles, why it uses it, who receives it, and your controls over it. All account data you import must be synthetic and created for testing purposes only.

This includes account IDs, usernames, passwords, names, email addresses, and all other CSV fields. Use fictional identities and credentials created for development, QA, or staging tests. Do not import real customer or employee records, personal account credentials, or production credentials. The packaged sample accounts and product-page demo are fictional.

Information we collect and process

Login Pal processes the CSV files you choose to import, including account IDs, usernames, passwords, and additional columns such as names, email addresses, or roles. Login Pal does not verify whether imported data is synthetic. If you include real information, the extension will process it too; you are responsible for using only synthetic test data. It stores imported information locally rather than sending it to metuur.

It also handles group names, authorized website domains, login-field matching rules, optional success-detection settings, recent account fills, and detected successful logins with their timestamps. During site setup, it reads the URLs and titles of matching open tabs so you can select a login page. This is used for that workflow, not to create a general browsing-history record.

When you request field detection, Login Pal reads visible input labels and attributes such as ID, name, autocomplete, and placeholder. It does not collect the values you type into those fields. Optional success detection checks a configured URL or the presence of a configured page element after a fill.

How we use this information

The extension uses this information to import and organize your groups, search for an account, configure authorized login pages, fill the account you select, copy credentials when requested, export a group, and display local fill history. It does not use this information for advertising, profiling, creditworthiness, or unrelated purposes.

Storage and data protection

Accounts and login history are stored in your Chrome profile using AES-GCM encryption. Group names and login configuration are also stored locally. Temporary session data supports active fill attempts and Undo. Login Pal does not use Chrome storage sync or operate a cloud account service.

The encryption key is kept in the same browser profile so the catalog can open automatically. There is no master password or lock screen. Encryption therefore does not protect the catalog from someone who can access your browser profile or device. Protect access to your device and use only synthetic test data.

Website access and credential sharing

You choose authorized websites and approve Chrome’s site-access permission. When you explicitly request a fill, Login Pal sends only the selected account’s username and password to the matching login page. The website and scripts running on that page can access the filled values. Login Pal does not submit the form; you press Sign in yourself. The website’s own privacy policy applies to the information it receives.

Copying a username or password places it on your system clipboard. Your operating system, clipboard managers, or other applications with clipboard access may read or retain it. Export CSV saves the selected group, including readable passwords, to a file on your device. Original and exported CSV files are outside the catalog’s encryption; anyone you share them with, or any application with access to those files, may read them.

These user-directed website, clipboard, and file actions are the extension’s data-sharing paths. The extension does not transmit your catalog, passwords, or fill history to metuur, analytics services, advertisers, or data brokers. We do not sell this data or provide it for advertising. The extension has no telemetry or remote analytics, and its scripts and fonts are packaged locally. metuur cannot remotely read your local catalog.

Retention, access, and deletion

Imported data and configuration remain in your local Chrome profile until you change or remove them, reset a group, remove the extension, or clear its browser data. You can view your accounts in Settings and export the selected group as CSV. Login Pal does not keep a server backup that metuur can restore.

• Delete accounts: remove individual accounts in Settings. The temporary Undo feature may briefly retain data needed to restore a deletion.
• Purge a group: clear its accounts and login history while preserving its setup.
• Reset a group: clear its catalog, login profile, and session state, then create an empty catalog. Repeat for each group you want to clear.
• Remove Login Pal: uninstall it through Chrome’s Extensions page to remove its extension-local data from that browser profile.
• Revoke website access: open Chrome → Extensions → Login Pal → Details → Site access. This blocks site actions but does not delete your catalog.

These controls do not delete original or exported CSV files, clipboard history, device backups, or information already received by a website. Manage those copies separately.

Chrome Web Store Limited Use

Login Pal’s use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Such information is used only to provide the account-management and login-assistance features described here. It is not used or transferred for personalized advertising, and the extension does not give metuur or its staff access to read your locally stored account data.

Privacy questions and support

Contact metuur at support@metuur.com for privacy questions or requests. If you email us, we receive your email address and the information you choose to send through our email service. We use that correspondence to respond to your request. Do not send passwords, account CSV files, or sensitive personal information. We cannot inspect or delete your local catalog remotely; use the controls described above.

Scope and changes to this policy

This policy covers the Login Pal extension. The product-page demo uses fictional accounts and cannot access your extension catalog. Websites you visit and services you choose to share data with have their own privacy practices. We will update this page when the extension’s data practices change and revise the date above.