Effective November 2, 2026
Extension Guardian checks the other extensions installed in your browser and warns you when one looks risky. It is built to need as little of your data as possible. This page explains exactly what it uses.
The extension reads the list of extensions installed in your browser, with their names, versions, permissions and how they were installed,
using Chrome's management API. It saves this list, the results of its checks and your alerts in your browser's local storage,
so it can tell when something changes. This data never leaves your device, except as described below.
If you use Keep off on these sites, the extension also reads the addresses of your open tabs (Chrome's optional
tabs permission, which it asks for only then) and compares it on your device with the sites you chose. Addresses are not stored
and never leave your device. The sites you chose are saved in your browser's local storage.
To find out who publishes each extension, the extension sends the IDs of your installed Chrome Web Store extensions
(for example eimadpbcbfnmbkopoojfekhnkhdbieeh) to our server. The server looks up the public Chrome Web Store page for each ID
and returns the publisher's name, contact details, user count and last update date. Nothing else is sent: no account, no identifier for you
or your browser, no browsing history, no website content and no cookies.
The server keeps the public store information for each extension ID for up to 6 hours, so that it does not ask the Chrome Web Store again for every request. It does not record which IDs came from which person.
The server runs on Cloudflare Workers. Like any website, Cloudflare receives your IP address when the extension connects, and processes it under the Cloudflare Privacy Policy to operate and protect its network. To keep one address from overloading the server, Cloudflare counts how many store lookups each IP address makes per minute; the count is dropped after the minute, and we never see it. We do not log or store IP addresses.
The Firefox version doesn't use our server. To check developers it asks Firefox Add-ons (addons.mozilla.org) directly for the public listing of each add-on you have installed, by its ID. Mozilla's own privacy policy covers those requests. Nothing is sent to us.
The page at guardian.tinyward.org checks one extension at a time. It receives only the store link or ID you paste in, looks up the same public store information, and keeps it for up to 6 hours in the same way. It uses no cookies and no analytics.
Removing the extension deletes everything it stored in your browser. Because the server stores nothing linked to you, there is nothing else to delete.
If this policy changes, we will update this page and the date above.
Questions: laboskiriste@gmail.com