How we protect data

Last updated: November 15, 2026

• Encrypted in transit. Everything the helper sends goes over encrypted connections.
• Credentials stay with their owner. A community's sign-in credential is kept in your browser and sent only to that community. It is never part of diagnostics.
• No passwords. The helper never asks for or stores your passwords.
• Trusted sources only. The helper accepts instructions only from community sites that work with it.
• Limited access. Diagnostics are available only to the people who maintain the helper, only to fix problems, and are deleted after 14 days.
• You decide. The helper acts only on tasks you start or features you switch on.

Reporting a problem

If you believe you have found a security issue, write to support@universalactionhelper.org.