diff --git a/src/popup/popup.html b/src/popup/popup.html
index fbddfb8..4412485 100644
--- a/src/popup/popup.html
+++ b/src/popup/popup.html
@@ -178,6 +178,11 @@
         access to your computer could read it. This is the same as browser cookies
         and localStorage, not as secure as saved passwords (which are OS-encrypted).
       </div>
+      <div class="privacy-note" style="color:#b45309;background:#fef3c7;padding:6px 8px;border-radius:4px;margin-bottom:6px">
+        Silent Send is a convenience tool, not a security guarantee. It can miss
+        PPI in images, file uploads, unusual name forms, or data you forgot to
+        configure. Always verify sensitive messages before sending.
+      </div>
       <a href="#" id="btnOptions">Options</a>
     </footer>
   </div>