Privacy Policy

Whisper shows SMS messages from the user’s own server in the browser. It works only with a server the user signs in to; without one it does nothing.

What the extension accesses

After sign-in, the extension connects to the server whose address you enter and receives the text, sender, SIM name and time of the messages that server allows you to see.

It stores in the browser’s extension storage:

• a session token issued by your server;
• the server address you entered;
• your display settings (size, font, theme, sound, always-on).

What it does not do

• It does not read your browsing history, page content or other tabs.
• It does not call any Google API. Google is used only to sign you in.
• It sends data only to the server you entered, over HTTPS.
• It does not sell data or share it with third parties.
• It contains no analytics, advertising or remote code.

Retention

Messages are kept in the extension only while the popup is open and for a few minutes afterwards. Message history is stored on your server under its own retention rules. Signing out removes the session token from the browser.

Permissions

• identity: Google sign-in through your server’s SAML endpoint.
• storage: the session token, server address and display settings.
• offscreen: plays the notification sound when the popup is closed.