DownloadWhat leaves your computer
AcaiSafe looks at sites here on your computer. The full address and your history never leave. Page content and what you type leave only if you click to check them. The exception is a CNPJ written on a page, with page reading on.
Without a click
| What leaves | Where to | When |
|---|---|---|
| Nothing about you, just the request for the scam list | AcaiSafe | Several times a day |
| A request for a code for this browser. The code is random and doesn’t say who you are | AcaiSafe | Once, at install |
| That code, to know if Plus is active, and whether page reading is on, which only joins a daily total | AcaiSafe | When you open AcaiSafe |
| Only the site’s name, without the rest of the address, to learn its age | Public site registries, not through AcaiSafe | When an address uses a brand’s name, when a download looks dangerous and, with page reading on, on little-known and classified-ad sites |
| The CNPJ written on the page, to learn if the company exists | BrasilAPI and Minha Receita, not through AcaiSafe | With page reading on, when a page shows a CNPJ |
Only when you click
| What leaves | Where to | When |
|---|---|---|
| Only the site’s name, to learn its age | Public site registries, not through AcaiSafe | When you open Site X-ray |
| The text you chose, with CPF, card, phone, email and Pix hidden before it leaves, plus the site’s name when it’s a page. An image leaves as it is. We don’t keep the content | AcaiSafe and the AI that reads it | When you click to check |
| The site’s name and the reason | AcaiSafe | When you report a site or say a warning was wrong |
| Your activation code | AcaiSafe | When you activate Plus |
| The name of the site the child asks to open | AcaiSafe, which emails the parent | When the child clicks to ask, then now and then until the answer, in Family mode |
Only if you turned it on
| What leaves | Where to | When |
|---|---|---|
| The email you wrote and the confirmation code | AcaiSafe | When you turn Family mode or guardian alerts on or off |
| Only the kind of warning, like “looks like it imitates a bank”. Never the site | AcaiSafe, which emails the guardian | When a warning shows, with a confirmed guardian |
| This browser’s code, to tell if protection stops | AcaiSafe | Every 12 hours and when the extension is removed, with Family mode or a guardian |
| Nothing about you, just the request for the Family mode list | AcaiSafe | Once a day, with Family mode on |
| Daily warning counts, with no site names | AcaiSafe, for the company’s dashboard | Only on computers a company’s IT team manages |
Checking, reporting, activating, Family mode, asking to unblock and guardian alerts also send this browser’s code.
How we check
On every code change, a test opens the extension in a browser where the whole internet is fake and recorded. It visits a site, fills a form with a made-up password and message, and opens a fake site.
The test fails if the password, the message, the page’s text, the full address or the CPF in that address shows up in any request other than to that site, or if a destination outside this list appears.
That test covers browsing and typing, with and without page reading. What leaves after a click is covered by other tests.
Everything that left in the last recorded run, on
- GET brasilapi.com.br/api/cnpj/v1/11222333000181
- GET lists.acaisafe.com/v1/sites.json
- GET minhareceita.org/11222333000181
- GET rdap.registro.br/domain/lojinha-do-bairro.com.br
- POST api.acaisafe.com/api/devices