Browser coach
Privacy notice
Last updated: 24 October 2026. Applies to version 1.0 and later. Team totals start with version 1.1.
The CyberSafe Coach browser coach is an add-on for Google Chrome and Microsoft Edge. It coaches you at three moments: a link in your email that goes somewhere other than it says, your work password typed into the wrong page, and a website pretending to be someone it isn't.
In short: every check happens on your device. The coach doesn't send your passwords, the pages you visit, your browsing history or the content of your emails to us or to anyone else.
What it looks at, and what happens to it
| What | Why | Where it stays |
|---|---|---|
| Links you click in Outlook on the web or Gmail | Compares the words of the link with where it really goes | Checked on your device at the moment you click, then forgotten |
| Your Microsoft, Google or work sign-in password | Turns it into a scrambled, shortened fingerprint so it can recognise the same password on another page | Up to 5 fingerprints, kept in your browser only. Never sent anywhere. Can't be turned back into your password |
| What you type into password boxes on other pages | Makes the same kind of fingerprint and compares it with the ones kept | Checked on your device, then forgotten |
| The address of the website you're on | Checks whether it's pretending to be a well-known name or your organisation | Checked on your device, then forgotten |
| How many times it has coached you | Shows "coaching moments in the last 7 days" when you click its icon | A count per day, kept in your browser only |
| Your organisation's name and website, if you or your IT add them | Spots websites copying your organisation | Kept in your browser only |
| An organisation code, if your IT adds one or you type one in | Adds your coaching moments to your team's totals | Kept in your browser, and sent with each count (see below) |
What is sent to us
Nothing, if you installed the coach yourself.
If your organisation uses CyberSafe Coach and the coach has its organisation code, the coach sends us a count each time it coaches someone, so the organisation sees team totals. Each count holds only three things: which of the three moments it was, whether IT installed the coach or you did, and the organisation code. We store the day it happened against your organisation, nothing more.
A count never holds your name, your email address, a password, the website you were on, page content or browsing history. We don't keep your internet address or the time of day. Managers only ever see weekly totals for the whole team, never who it was.
Usually your IT adds the code when they install the coach, and your organisation will tell you before that happens. If you type a code in yourself, counts are only kept if your organisation has chosen to allow that. Clear the code at any time by clicking the coach's icon.
Why it needs permission to work on every website
Chrome and Edge ask you to allow it to “read and change data on websites”. It needs this to see a link before it opens, notice a password box and recognise a look-alike website, wherever you are. It only changes a page by showing its own message. It also asks to store data, which is where it keeps the fingerprints, counts and settings described above, in your browser.
Our promise on limited use
The use of information received from the browser coach follows the Chrome Web Store User Data Policy, including the Limited Use requirements. In plain English:
- we only use it to coach you and, for organisations, to show team totals
- we never sell it, and never use it for advertising or to decide anyone's credit
- we never pass it to anyone else, except to keep the service running securely or if the law requires it
- no one at CyberSafe Coach reads it, unless you ask us to help with a problem or we must for security or by law
Removing it
Right-click the coach's icon next to the address bar and choose Remove. Everything it kept in your browser, including the fingerprints, is deleted with it. If your organisation installed it, ask whoever looks after your IT.
Who we are and how to contact us
The browser coach is made by CyberSafe Coach Plus Ltd, registered with the Information Commissioner’s Office under reference ZC111800. Questions, or something not right? Email admin@cybersafecoach.co.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk.
For everything else we do, see our main privacy policy.