Inspiration
Every time you fill a form online, your personal data is at risk. We discovered that on a single visit to Amazon.in, over 50 silent beacon requests fire in the background, tracking you without any indication. 1.4 billion Indians enter Aadhaar numbers, PAN cards, and bank details into websites daily. We built NordGuard to protect them.
What it does
NordGuard is a Chrome Extension that acts as a real-time privacy guardian on every website you visit.
- 🔍 PII Detection Detects 14 types of sensitive data in real time: Credit Cards, Aadhaar, PAN Cards, Passwords, Emails, Phone Numbers, and more
- ⚠️ Warning Overlay Instant alert when sensitive data is detected, with Block or Continue options
- 🛑 Form Blocker Intercepts form submissions containing HIGH-risk data before anything is transmitted
- 👤 Shadow Profile Shows exactly what each website knows about you cookies, trackers, browser fingerprint
- 📡 Live Data Flow Real-time view of every outgoing network request, color-coded by risk level
- 🌐 Breach Checker Checks emails against HaveIBeenPwned breach database instantly
- 🔵 NordVPN Nudge Smart banner recommending VPN protection on high-risk pages
- 📊 Dashboard Full analytics with charts, history, privacy scores, and CSV export
How we built it
Vanilla JavaScript + Chrome Extension Manifest V3. No frameworks, no backend, no cost. Seven content script modules handle detection, UI injection, network monitoring, and breach checking, all running locally in the browser. Chrome Storage API keeps everything 100% on-device.
Challenges we ran into
The hardest challenge was preventing false positives credit cards and Aadhaar numbers are both long digit strings. We solved this with tightened regex patterns and a conflict resolver with strict type priority rules. We also used MutationObserver to handle dynamic forms on SPAs like Amazon and Flipkart, and prefixed all CSS selectors to prevent style conflicts on host pages.
Accomplishments that we're proud of
- Works on real websites, Amazon.in, Flipkart, Google, YouTube all tested and verified
- Detected 50+ live beacon trackers on Amazon.in in real time
- Complete product: detection + blocking + visualization + dashboard + breach checking, all working
- ₹0 cost, no API keys, no servers, no subscriptions
What we learned
The biggest privacy threat isn't hackers, it's the invisible tracker infrastructure every major website runs by default. Seeing 50+ beacon requests fire silently on Amazon.in was alarming even for us as developers. We also learned how much browsers expose through fingerprinting APIs, timezone + screen resolution alone can uniquely identify a user without any cookies.
What's next for NordGuard
- Gemini AI for context-aware risk explanations
- Firefox extension support
- Enterprise privacy audit reports
- Google Safe Browsing API integration
Built With
- api
- canvas
- chart.js
- chrome-extension-manifest-v3
- chrome-storage-api
- css3
- haveibeenpwned
- html5
- javascript
- mutationobserver-api
- nordvpn
- performanceobserver-api
- regex-engine
- xposedornot-api
Log in or sign up for Devpost to join the conversation.