Privacy Policy for NicSSOFastLogin

Effective date: May 13, 2026

NicSSOFastLogin is a browser extension that helps authorized users fill login fields on configured organizational sign-in pages.

This privacy policy explains what information the extension handles, how it is used, and how it is stored.

Information the Extension Stores

NicSSOFastLogin stores the information you enter in the extension popup:

• Email address or username
• Password
• OTP/TOTP secret

This information is stored locally in your browser profile using the browser extension storage API. It is used only to fill login fields on the configured sign-in pages supported by the extension.

How the Information Is Used

The extension uses your stored information to:

• Fill the username or email field on supported login pages
• Fill the password field
• Generate a local one-time password from your OTP/TOTP secret and append it to the password when needed
• Use only the username part before @ for compatible username-based login forms when an email address is stored

The extension runs only on specific login domains that are configured in the extension package. It does not run on every website you visit.

Local Storage and Encryption

Your saved login information is stored on your device in your browser profile.

NicSSOFastLogin encrypts the stored credential data using AES-GCM before saving it to browser local storage. The encryption key is also stored locally in the browser profile so the extension can decrypt the data when filling login forms.

This encryption helps prevent casual viewing of the stored data, but it does not protect against someone who has access to your browser profile, your device, or malicious software running on your device.

Data Sharing

NicSSOFastLogin does not:

• Sell your data
• Send your stored credentials to the extension developer
• Send your stored credentials to analytics services
• Use third-party tracking
• Collect browsing history
• Use remote servers to process your data

Your login information is only inserted into login forms on the configured sign-in pages supported by the extension.

Browser Permissions

The extension requests the storage permission so it can save your settings and login information locally in your browser.

The extension also has access to specific configured login domains so it can detect login forms and fill them.

Data Retention and Deletion

Your stored information remains in your browser profile until you change it, clear the extension data, or uninstall the extension.

You can delete the stored information by removing the extension or clearing the extension’s site and storage data through your browser settings.

Security

Because this extension stores sensitive login information locally, you should only use it on a trusted device. Keep your operating system, browser, and extensions up to date, and avoid installing untrusted extensions.

Changes to This Policy

This privacy policy may be updated if the extension changes how it handles data. Any updates should be reflected in this file.

Contact

For questions about this privacy policy, contact the extension maintainer through the project repository or the browser extension listing where the extension is published.