Privacy Policy

Effective: April 12, 2026

TL;DR — HashLab collects nothing. Zero data leaves your browser. Ever.

1. What HashLab Does

HashLab is a browser extension that computes cryptographic hashes (MD5, SHA-1, SHA-256, SHA-512) of text and files. All computation happens entirely within your browser using the Web Crypto API and a bundled JavaScript MD5 implementation.

2. Data Collection

HashLab does not collect, store, transmit, or share any data. Specifically:

No personal information is collected
No usage analytics or telemetry
No cookies or tracking technologies
No user accounts or authentication
No data is sent to any server, API, or third party

3. Network Activity

HashLab makes zero network requests. The extension requests no browser permissions and operates entirely offline. You can verify this by inspecting the extension's manifest, which declares an empty permissions array.

4. File Access

When you use the file hashing feature, the selected file is read locally in your browser using the FileReader API. The file contents are processed in memory to compute hashes and are never stored, cached, or transmitted. File data is discarded when you close the popup or select a different file.

5. Third-Party Services

HashLab uses no third-party services, libraries loaded from CDNs, or external resources. All code and fonts are bundled with the extension.

6. Open Source

HashLab is fully open source. You can audit the complete source code at github.com/hfa-ny/HashLab.

7. Changes to This Policy

If this policy is ever updated, changes will be posted on this page with a revised effective date. Given the nature of HashLab (zero data collection), meaningful changes are unlikely.

8. Contact

If you have questions about this privacy policy, you can open an issue on our GitHub repository.