What KnotSafe does

KnotSafe is a browser extension that (1) shows which Salesforce environment — Production, Sandbox or Scratch Org — you are in, and (2) offers an optional read-only lock that blocks clicks, edits, form submissions and uploads on Salesforce records and on any website you choose, while still allowing reading and navigation. All of this happens locally, inside your own browser.

Data we collect

None. KnotSafe has no backend and makes no network requests of its own. It reads the hostname of the page you are on, and the page's interactive elements (buttons, links, form fields), only to show the right indicator and enforce the lock. This is processed locally and is never recorded or sent anywhere. It does not read, log, or transmit the content of the pages you visit or of your Salesforce records.

Data stored on your device

To remember your preferences, KnotSafe saves a small amount of settings data using the browser's local storage API. This data never leaves your device and includes only:

• the colour you chose for each Salesforce environment type;
• whether the lock is on or off, per site / org hostname, and your “lock all sites” default;
• whether the blocked-action sound is on, its volume, and the auto-hide setting;
• the on-screen position of the badge;
• a one-way SHA-256 hash of your optional unlock password (the password itself is never stored).

You can clear this data at any time by removing the extension, or via your browser's extension storage controls.

Permissions

• Host access to all websites — so the extension can show the Salesforce indicator and apply read-only mode on the sites you choose to lock. Page content is processed locally and never sent anywhere.
• storage — to save the settings listed above on your device.
• tabs / activeTab — to read the current tab's address so the correct per-site state is shown.
• webNavigation — to keep the indicator and lock accurate when a single-page app changes views without reloading.

Record Lock and site lock

The lock changes only what you see and can click in your own browser. It makes no changes to your Salesforce data and is not a substitute for Salesforce's own permissions and sharing model.

Third parties

KnotSafe does not share data with any third party, because it does not collect any. It contains no third-party code, trackers, remote code, or advertising.

Children's privacy

KnotSafe is a general-purpose developer utility and does not knowingly collect information from anyone, including children.

Changes to this policy

If this policy changes, the “Last updated” date above will be revised.

Contact

Questions about this policy? Email engage@technologyknots.com.