Extension Privacy Statement
Supplemental privacy information for the Dralvia browser extension and related overlay workflows.
Quick links
Public legal route map
These pages are intentionally crawlable and static so buyers, counsel, and operators can reach them without platform login or hash-route context.
Contact
For platform help, onboarding, or support requests, contact [email protected].
For policy, privacy, or contracting questions, contact [email protected].
For security disclosure, contact [email protected].
Without an account
When you open a web page, the extension asks Dralvia whether that page is risky. It sends the site and path only, for example https://shop.example.com/checkout. It never sends the part after a ? or #, where sign-in codes, reset links and search terms usually are.
Pages in incognito or private windows are not checked automatically. When you open the extension and ask it to check the current page, it sends that page's full address, because you asked for it.
The answer is kept in the extension for up to 24 hours (6 hours for Caution or Avoid), so revisiting a page does not send it again.
With a workspace (managed or enrolled)
- When your organisation enrols the extension, page checks use the full page address and are recorded in your workspace.
- Page details used by the policies your organisation turns on: labels on buttons such as "Connect wallet", basic page timings, and the type of action blocked or allowed.
- Optional list of other installed extensions (name, version, permissions), only when your organisation grants the optional
managementpermission. - Optional wallet context during signing flows, when your organisation enables wallet warnings.
Never collected
- What you type into forms: passwords, seed phrases, messages.
- Keystrokes, cookies, or your browsing history as a list.
- Nothing is sold, and nothing is sent to advertising or analytics companies.
Where it goes and how long it is kept
The extension talks only to Dralvia (dralvia.tech, or your organisation's own Dralvia address). Checks made without an account are not shown to anyone else and are not listed in public scan feeds. They are kept under the same retention as other scans, described in the Privacy Policy.
The extension needs access to all sites because a dangerous page can be on any site. It reads the page address, not the page's content, unless your organisation turns on data-protection policies.
Removing or disabling the extension stops all of this immediately.
Contact
- Privacy: [email protected]
- Security: [email protected]
Public-site position
The marketing site exists to explain the platform and direct visitors into the live product. Public legal pages live here so they are crawlable, linkable, and accessible without entering the platform console.
Platform legal center
The product platform also maintains legal-center routes for authenticated and guest users. Use the public pages here for external sharing and the live platform for operational/legal workflow context.