L7 Admin Guard Privacy Policy
Last updated: June 28, 2026
Overview
L7 Admin Guard is a high-performance Zero-Trust platform consisting of a browser extension ('the Extension') for secure access, and a web dashboard for administration. This Privacy Policy describes how we process your information.
Data Collection
What we collect
For Extension Users (End Users): The extension collects and stores the following data locally on your device only:
- Configuration Token: a short code to retrieve gateway settings
- Device ID: a randomly generated 5-character identifier (uuid)
- Master password (if applicable): used to decrypt configuration, stored locally
- User settings: theme, language, and toggle preferences
For Dashboard Users (Site Administrators): When you register an account to manage your infrastructure, we collect:
- Email address: used for technical notifications, password resets, and important updates
- OAuth2 Data: if you log in via third-party providers, we receive your authentication profile
- Audit Logs: we log administrative actions in the dashboard to maintain security and provide you with an audit trail
What we do NOT collect
- We do not collect personal data
- We do not track browsing history
- We do not collect usage analytics or statistics
- We do not share data with third parties
- We do not sell your data
- We do not use or share your data for purposes unrelated to the extension's core functionality
- We do not use or share your data for credit scoring or lending purposes
Data Storage
All data is stored locally in your browser using storage.local and storage.sync APIs in Chrome. Data is not sent to external servers except for official APIs:
- Configuration API (
api.l7.run): to fetch and update gateway settings using your token (HMAC-signed POST requests) - GeoIP services (
geo.l7.run,l7.run/geo/): to display information about your IP address upon your explicit request (the former goes through the gateway, the latter directly)
Data Transmission
- Configuration requests are performed over HTTPS using Google Trust Services LLC certificates
- Traffic to protected resources is routed through the relevant L7 Gateway
- No personal data is requested by the system or included in API requests
L7 Gateway Functionality
When enabled, the Extension routes traffic for specific domains through a lightweight L7 Gateway. The list of protected domains and the selection of the optimal gateway is determined by your configuration via a PAC-script.
Gateways operate on a zero-copy principle, without MITM or traffic content analysis, using end-to-end encryption. Routing is performed via SNI. The gateway logs exclusively the fact of a connection (device uuid and IP address) to monitor limits and prevent abuse. We do not know anything about the specific user: no email, no accounts. Moreover, a single token can be used by several people. Connection logs are stored for 2 weeks.
Used Permissions
- proxy: to configure browser routing rules (via PAC-script)
- storage: to save configuration and settings locally
- tabs: to detect the current site and update the extension icon
- webRequest: to handle transparent authentication processes on gateways (including dynamic SNI formation)
- alarms: for periodic configuration update checks
Data Deletion
You can delete all stored data at any time:
- Using the 'Delete profile' button in the Extension
- By uninstalling the Extension
- By clearing extension data in Chrome settings
APIs and Third-Party Services
The Extension and Dashboard interact with the following services:
- Official L7 APIs (Our Servers):
api.l7.run(Configuration) andgeo.l7.run/l7.run/geo/(IP checks) - Third-Party:
Creem.io— for processing subscriptions and payments (Dashboard Users / Administrators only)
Children's Privacy
This Extension is not intended for use by children under the age of 13.
Changes to this Policy
We may update this Privacy Policy from time to time. Changes will be reflected in the 'Last updated' date.