Last updated: August 29, 2026

Extension Health Checker ("the extension") helps users audit the security and health of their installed browser extensions. This privacy policy explains exactly what data the extension accesses, where it goes, and your rights.

1. What data stays on your device

All core scanning happens locally in your browser. The extension reads your installed extensions' metadata (name, ID, version, enabled state, requested permissions) via the Chrome management API, analyzes it on your device, and displays the results. The following data is stored locally using chrome.storage.local and never leaves your browser unless explicitly stated below:

• Extension scan results and history (installs, updates, uninstalls, and permission changes — up to 500 entries) • Your Pro license key and its cached validation status • Your settings (e.g., weekly auto-scan preference)

1. What data is transmitted (Pro license verification only)

The extension makes network requests only when you choose to activate Pro by entering a license key. At that time, it sends two values to Gumroad's public license verification endpoint (https://api.gumroad.com/v2/licenses/verify):

• Your product identifier • The license key you entered

This is used solely to verify that your purchase is valid. Gumroad processes this data under Gumroad's own privacy policy (https://gumroad.com/privacy). No other network requests are made by the extension. The extension does not connect to any server operated by the developer.

1. Data the extension does NOT collect

• No browsing history • No website content, form inputs, or keystrokes • No personal information (name, email, address) • No financial or payment information (payments are handled entirely by Gumroad) • No analytics, no crash reports, no advertising identifiers, no tracking of any kind

1. Permissions and why they are needed

• management — Core functionality: lists installed extensions, reads their permissions/metadata, and enables, disables, or uninstalls them at your explicit request. • storage — Stores scan history, settings, and license status locally. • alarms — Schedules the optional weekly auto health check (Pro feature). • notifications — Shows desktop notifications for weekly scan results and extension permission-change alerts (Pro feature). • Host permission: https://api.gumroad.com/* — Used exclusively to verify Pro license keys. No other domains are accessed.

1. Data retention and deletion

All locally stored data remains on your device until you clear the extension's storage or uninstall the extension. Scan history is automatically trimmed to the most recent 500 entries. Uninstalling the extension removes all associated data.

1. Children's privacy

The extension does not knowingly collect any data from children and contains no age-gated content.

1. Changes to this policy

If this policy changes, the updated version will be posted at this URL with a revised "Last updated" date.