Privacy Policy

Last updated: October 2026

1. Overview

This website and all browser extensions offered by VKT (Developed by AnnMax) are designed with user privacy as a core principle. None of our extensions collect, store, or transmit your browsing activity, the pages you visit, or the data you work with to us — all of that is processed inside your local browser. The only exceptions are license checks and the sync features described below, which you control.

The exceptions are license activation/validation and optional sync features. When you activate a license or while an activated license is being re-validated, the extension sends the data listed in section 2 below to our own license server (api.annmax1983.com). JustFocus stores its blocklist, timer state and settings in chrome.storage.sync by default, and StylePatch (Premium), LocalBox2FA (Premium), LiteCopy (Premium) and VKT Form (Premium) offer optional cross-device sync — these mirror data through chrome.storage.sync into your own browser account, never to our servers. For LocalBox2FA the sealed records, account names, TOTP settings and the vault's salt/iterations/verifier are mirrored — the master password and license key are never included. No page content is ever included. Without an activated license, extensions make no requests to our servers, apart from retrying a license release requested while offline.

2. Extension Data Processing

All VKT browser extensions process the data you work with exclusively in your local browser environment:

• Image processing (ImageConv, PageShot, Image Grabber): All image conversions, screenshots, and downloads happen in browser memory using the Canvas API. ImageConv and Image Grabber fetch the images you choose to convert or download directly from their source; no images are uploaded to any server.
• TOTP codes (LocalBox2FA): All two-factor authentication codes are computed locally using the Web Crypto API. Secret keys are stored in the extension's local storage and never leave your device unless you explicitly enable optional cross-device sync. With sync on, records are sealed with AES-GCM under your master password, and the sealed records, account names, TOTP settings and the vault's salt/iterations/verifier are mirrored through chrome.storage.sync into your own browser account (Google or Microsoft); the master password and license key are never uploaded. Network requests to our license server are limited to license activation, periodic re-validation (at most once per 2 hours when the popup opens) and release, plus retrying a release requested while offline. All free features work fully offline.
• Web page modifications (StylePatch, FontFixer, LiteCopy): CSS injection and DOM modifications happen locally. No page content is read, stored, or transmitted. StylePatch's optional Cloud Sync (Premium) stores only site configs, the blacklist, the on/off toggle and the default theme in chrome.storage.sync; LiteCopy's optional Premium sync stores only your remembered per-site rules there — never page content, license keys or browsing data.
• HTTP header modification (VKT Header): Header rules — the matched domain, header names and values — are stored locally in chrome.storage.local and applied by Chrome's declarativeNetRequest API on your device. Requests and page content are never read, stored, or transmitted. These are session rules, so they are cleared automatically when the browser is closed. The only network request the extension makes is license activation/validation (see below); all free features work fully offline.
• Table extraction (TableGrab): HTML table parsing and CSV export happen entirely in the browser. No table data is uploaded.
• Auto-refresh (RefreshMate): Page refresh timers run locally. No browsing data is collected.
• Site blocking (JustFocus): The blocklist, timer state and settings are stored in Chrome/Edge sync storage, so they follow your own browser account and are never sent to our servers. An optional password is stored only as a salted hash in local storage on your device. No browsing activity is tracked.
• Form snapshots (VKT Form): Saved form values are stored in the extension's local storage on your device (chrome.storage.local) by default and are never uploaded to our servers. Filling happens locally in your browser. Optional cross-device sync (Premium) mirrors snapshots through chrome.storage.sync in your own browser account. License activation/validation sends only the license key and a random install identifier to our license server; all free features work fully offline.
• Markdown notes (VKT Note): Notes are created from your text selection and stored locally on your device; JSON export is generated in your browser. Note content is never uploaded.
• Link extraction (LinkHarvest): Page links are scanned, filtered and exported (TXT / JSON / CSV) entirely inside your browser. The optional Link Audit sends HTTP HEAD/GET requests directly from your browser to the links you choose to check — no cookies, no page content, and the results stay in the results page memory. Site access for the audit is requested only when you start it, and only for the sites being checked.
• Timers (RetroTime): Stopwatch, countdown and pomodoro timers run locally, and history is stored on your device. No browsing activity is tracked.
• Product price tracking (VKT Item Pin): Pinned product titles, prices, links and price history are stored locally on your device. Page content is extracted in your browser and never uploaded.
• Keyboard shortcuts (VKT Shortcut): Block/remap rules are stored in chrome.storage.local and applied locally. Keystrokes are not recorded or transmitted.

What the license request contains. When a Premium license is activated or re-validated, the request to api.annmax1983.com contains only: the license key you entered, the plugin identifier, a random install identifier generated locally on first activation (no device information is collected, hashed, or derived), and basic request metadata (browser name and major version, browser language, timezone, and user agent string). No page content, header rules, notes, screenshots, form data or browsing history are ever included. This request happens only on activation, periodic re-validation and release; without an activated license no extension contacts our servers, apart from retrying a release requested while offline. Network requests that are part of a feature you start — fetching an image for conversion or download, Link Audit checking the links you choose, or sync through your browser account — are described in the list above and never send data to us. Our license server records the IP address of these requests solely for rate limiting and abuse prevention — never for profiling, advertising, or sharing with third parties.

3. Website Visitor Data

This website (annmax1983.com) is hosted on Cloudflare Pages. Cloudflare may collect standard web server logs including IP addresses, browser user agents, and access timestamps as part of their normal CDN operation. We do not collect, store, or analyze any additional visitor information beyond what Cloudflare's infrastructure requires.

We do not use any analytics tools, tracking pixels, cookies for advertising, or fingerprinting technologies.

4. Payment Information

All payment processing is handled entirely by Creem, our third-party payment processor. When you make a purchase:

• You are redirected to Creem's secure checkout page
• Creem processes your payment information directly
• We do not have access to your credit card number, CVV, or full payment details
• We only receive confirmation of successful payment and your email address for license delivery

5. Third-Party Services

The following third-party services are used on this website:

• Cloudflare Pages – Website hosting and CDN. Cloudflare Privacy Policy
• Creem – Payment processing for premium licenses. Creem Privacy Policy

We encourage you to review the privacy policies of these third-party services.

6. User Rights

You have the right to:

• Request information about any data we may have about you
• Request deletion of any data we hold about you
• Opt out of any data collection (though we collect essentially none)

To exercise these rights, contact us at [email protected].

7. Children's Privacy

Our extensions and website are not directed at children under 13. We do not knowingly collect any information from children.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of our extensions or website after changes constitutes acceptance of the updated policy.

9. Contact Information

If you have any questions about this privacy policy, please contact us:

Email: [email protected]

For 3-day premium trial application, contact [email protected].