diff --git a/src/popup/popup.html b/src/popup/popup.html
index 2f8cfb7..fbddfb8 100644
--- a/src/popup/popup.html
+++ b/src/popup/popup.html
@@ -174,8 +174,9 @@
     <footer class="footer">
       <div class="privacy-note">
         Your data never leaves your browser. No servers, no tracking, no analytics.
-        Identity data is stored in local browser storage only — as secure as your
-        browser's saved passwords. Nothing is transmitted anywhere.
+        Identity data is stored unencrypted in local browser storage — anyone with
+        access to your computer could read it. This is the same as browser cookies
+        and localStorage, not as secure as saved passwords (which are OS-encrypted).
       </div>
       <a href="#" id="btnOptions">Options</a>
     </footer>