// privacy policy

MalExt Sentry

Last updated:
Overview

MalExt Sentry is a browser extension that checks your installed extensions against a public database of known malicious extensions. Your privacy is fundamental to how this extension is built.

Data We Access
Installed Extensions List

We use Chrome's management API to read the list of extensions installed in your browser. This data is only used locally to compare extension IDs against the public threat database.

This data is never transmitted, collected, stored on any server, or shared with any third party.
Threat Database

The extension fetches a publicly available CSV file from GitHub (raw.githubusercontent.com) containing known malicious extension IDs. This is a one-way download only. No information about you or your extensions is sent in this request. The database is cached locally using Chrome's storage API to reduce network requests.

Data We Do NOT Collect
  • Personally identifiable information
  • Browsing history or activity
  • Analytics or telemetry
  • Cookies or fingerprinting
  • Extension names or metadata
  • Data sold or shared with third parties
Data Storage

A cached copy of the public threat database is stored locally in Chrome's extension storage (chrome.storage.local). No data is stored on external servers.

Network Requests

The extension makes exactly one type of network request:

Destination Purpose Frequency
raw.githubusercontent.com Download the public malicious extension ID list On install, every 6 hours, and on manual rescan

No user data is included in this request.

Permissions Justification
Permission Reason
management Read installed extensions to check against the threat database
storage Cache the threat database locally to reduce network requests
alarms Schedule periodic background scans (every 6 hours)
Changes to This Policy

Any changes to this privacy policy will be reflected in this document with an updated date. Continued use of the extension after changes constitutes acceptance.