Phishnoo Sandbox privacy


The extension stores the key locally until you select **Forget key**. It sends the key and explicitly submitted example fields only to the sandbox service. It does not read tabs, emails, or browsing history. The service stores the latest 250 submitted reports plus a seed example in SQLite. Holders of the shared sandbox key can read recent submissions. No customer systems, analytics, or simulation-sending capability are connected. The operator can clear submitted reports by stopping the service and removing the sandbox database before restarting.