Cyber Grants AllianceApply for Grants
MenuClose
Grant Programs
Resources
About
State GrantsEventsPressFAQ
Apply for Grants+1 (888) 323-9991

Marshall Bailey by Cyber Grants Alliance privacy policy

Last updated October 10, 2026

Marshall Bailey by Cyber Grants Alliance is a no cost browser extension from Cyber Grants Alliance. It warns you, and blocks the page, when a website imitates the Microsoft 365 sign in page to steal your password. This policy covers the extension only. Our website has its own privacy policy.

What does Marshall Bailey collect?

Nothing. Marshall Bailey does not collect, store on our servers, sell or share any personal information. That includes:

  • Your passwords or anything you type
  • Your browsing history
  • The content of the pages you visit
  • Your name, email address or location

Marshall Bailey has no ads, no tracking and no analytics.

Where does the checking happen?

Inside your browser. Marshall Bailey looks at pages that show a Microsoft style sign in form and decides on your device whether the page is real. Your settings, a cached copy of the detection rules and simple counters (pages blocked, real sign in pages confirmed) are kept in your browser's local storage and never leave your device.

Does Marshall Bailey connect to the internet?

On its own, it makes one kind of request: it downloads a public detection rules file from GitHub (CyberDrain Check), about once a day, so it keeps up with new scams. That request sends no information about you or the pages you visit. If the download fails, Marshall Bailey uses the copy of the rules packaged with it.

What about the optional reporting settings?

Marshall Bailey's settings include optional reporting to a CIPP server or a webhook, for IT teams that want to see blocked pages across their organization. These are off unless you, or the organization that manages your browser, turn them on. When they are on, details of a detection, such as the address of the blocked page, go only to the server that you or your organization entered. They are never sent to Cyber Grants Alliance.

Why does Marshall Bailey ask for these permissions?

  • Access to all websites. A fake sign in page can be hosted on any website, so the check has to run on every page. Page content is analyzed in your browser and is not collected or sent.
  • Tabs and active tab. To check a page as soon as it opens, show the badge for each tab, and replace a blocked page with the warning.
  • Storage. To keep your settings, the detection rules and the counters in your browser.
  • Scripting. To protect tabs that were already open when Marshall Bailey was installed.
  • Web requests. To read page response headers as one sign of a real Microsoft page. Headers are read in memory, never stored long term and never sent anywhere. Marshall Bailey does not block or change your requests.
  • Alarms. To refresh the detection rules once a day.

Is the code public?

Yes. Marshall Bailey by Cyber Grants Alliance is based on Check by CyberDrain and is licensed under the GNU Affero General Public License 3.0. Its source code is published at github.com/capitalcybercompliance/ares-da-bailey-guard, so anyone can check what it does.

Changes and questions

If this policy changes, we will update this page and its date. Questions about Marshall Bailey or this policy: contact Cyber Grants Alliance.