Who maintains this site

Ihsan Naslam maintains Extension Privacy Checker and reviews the methodology, detection rules and long-form guides. The project is independent and has no sponsored rankings, paid certifications or affiliate placements.

Contact: ihsannaslam@gmail.com. GitHub: devopsmaster987-cmd.

Editorial standards

Pages show a last reviewed date. Corrections are accepted by email and the review date is updated when a factual change is published. Generated analyzer reports are static indicators, not official audits or certifications.

Why this exists

Extension permission prompts are short and often technical. A prompt may say an add-on can read and change data on all websites without explaining what that means in practice, or which code and external services are involved. This project turns the contents of an extension package into a structured report: requested capabilities, website access, code indicators, referenced domains and a transparent risk score.

Principles

  • No code execution. The extension is parsed as data. It is not installed, evaluated or run in a browser context.
  • Local by default. Selected files are processed in your browser. Reports stay in the page.
  • Evidence over verdicts. Every finding shows the matched text and the reason it matters. The score is not presented as a malware verdict.
  • Transparent scoring. The six categories, weights and contributions are published and shown in each report.
  • Accessible explanations. Reports are written for nontechnical readers, with enough detail for developers and reviewers to verify the result.

Independence

Extension Privacy Checker is not affiliated with Google, Microsoft, Mozilla or any extension developer. Store names are used only to identify supported formats. There are no sponsored rankings, paid certifications or affiliate placements in reports.

Free and accountless

The analyzer, reports and exports are free. There is no account requirement and no paywall around the scan. If you find the tool useful, the best contribution is reporting a reproducible false positive or a missing detection.

How to use the site

Start with the analyzer, read the methodology for scoring details, or browse topics and guides for background.