Browser extension permissions
An extension that says it will not watch you browse is asking to be believed. This one is built so you do not have to. The browsing permissions are optional, which means the browser itself withholds them until you say yes, and you can confirm that on your browser's extension details page rather than taking our word for it.
Version 0.1.0. The extension is built and reviewable in the open, and is not yet published to a browser store. Until it is, it can be loaded unpacked from the repository.
What installing it grants
This is the complete list. Nothing here can read the pages you visit, your history, or your open tabs.
downloads
Sees the name and address of files your browser saves, so a finished export can be spotted. It cannot read pages or history.
storage
Remembers which capabilities you turned on, on your device. Nothing else.
Site access
Limited to http://localhost:3000/* and https://luciddatabank.com/*, so a detected export can be handed to your vault. No other site is reachable.
Capabilities, and how each one is granted
| Capability | What it does | Browser permission | Granted |
|---|---|---|---|
| Import assistanceLD-205 | Notices when a data export finishes downloading and offers to hand it to your vault.Seeing that a file was saved needs the downloads permission. It reveals the file name and where it came from, not what you browse. | None beyond install | At install |
| Tracker insightLD-206 | Shows which companies collect data as you browse, analysed on this device, and sends Global Privacy Control on your behalf.Identifying who collects from a page needs to see which sites you visit, run a reader in the page, and attach an opt-out header to requests. That is why it is off until you turn it on, and why turning it off removes the permission rather than setting a flag. | webNavigation, scripting, declarativeNetRequestWithHostAccess, <all_urls> | Separate opt-in, with a browser permission prompt |
| Browsing contributionLD-207 | Lets you sell sanitized browsing data through the marketplace.This is a commercial decision, not a privacy feature, so it is asked for on its own. Turning on tracker insight never turns this on. | webNavigation, scripting, <all_urls> | Separate opt-in. Never bundled with tracker insight |
Turning a capability off
Switching a capability off removes the underlying browser permission rather than setting a flag we control. If two capabilities need the same permission, it is removed once neither is on. That is checkable: after turning tracker insight off, your browser's extension details page should no longer list access to all sites.
Uninstalling removes every permission and everything the extension stored on your device. Nothing about the extension is kept on our servers, because it never sends us anything.
What it does with a file
When an export finishes downloading, the extension notices the file name and where it came from. It does not read the file. If you choose to import it, the file is handed to the vault page in your browser and encrypted there with your key before anything is stored. It is never uploaded by the extension.
What tracker insight does, and does not, keep
Identifying who collects from a page happens on your device, against a list that ships with the extension. No request is made to us or to anyone else to perform it, and a test in the repository reads the analysis code to check it cannot make one.
- Only the registrable domain of a collector is kept. Never a path, a query string, or a fragment, which is where session tokens and email addresses live.
- Which sites you visited is never written to your vault. A saved summary holds counts and company names.
- Health, finance, legal, adult, government, and support sites produce no record at all. Not a filtered one, none, because the visit itself would be the disclosure.
- Subdomains are collapsed to the organization, so a record cannot say which product you used.
- While tracker insight is on, the extension sends the Global Privacy Control signal. Reporting who tracks you while staying silent about your opt-out would be incoherent.
Turning tracker insight off deletes the findings as well as removing the permission. They were only meaningful while you had it on.