NPC Verify
NPC Verify Privacy Policy
Last updated: 2026-10-21
NPC Verify is a browser extension from NPC Labs. It checks whether an image on a web page is registered with NPC Labs. This policy says what the extension does with data, in plain terms.
What the extension sends
When you run a check, the extension computes a SHA-256 hash of the image's web address on your device and sends that hash to the NPC verification API (api.npclabs.xyz). The API answers whether a record exists for that hash.
The extension never sends the image itself, the image's address, the page you are on, or anything about you to NPC Labs.
The API's answer is cryptographically signed, and the extension verifies that signature on your device before showing you a result. NPC's API logs are operational (timestamps, request paths, response codes). The hash of an image address can, in principle, be matched against known public image addresses; it cannot be reversed into the address of an image that is not already public.
What stays on your device
Image forensics (reading the file's embedded metadata) happen entirely on your device. The image bytes are read into memory for the check and are never transmitted, stored, or shared.
The extension stores two things in your browser's local extension storage: a counter of how many free checks you have run, and, only if you or your developer set them, an API address and key override. NPC Labs cannot see either.
What the extension does not do
No accounts. No analytics. No advertising. No tracking across sites. No sale or sharing of data with third parties. No remote code: everything the extension runs ships inside the extension.
Two optional links in the results, Google Lens and TinEye, open those services in a new tab with the image address, only when you click them. Their privacy policies apply there.
Talking with Biblo on this site
This site offers Biblo, an AI assistant that answers questions about Verified by NPC from NPC Labs' public pages and published articles. What you type into the chat is sent to NPC's chat service so it can answer you. Conversations are kept for 90 days and may be read by the NPC team to improve these answers. Please do not share private details in the chat. The chat needs no account, and it cannot look records up or change them: Search is where a record speaks.
Contact
Questions about this policy: hello@npclabs.xyz.