Security

Permissions

The extension requests exactly two permissions:

• storage: to save your rules and settings in your own browser.
• activeTab: to support the popup on the tab you have open.

Webpage access is required because replacing text on pages is the product: the content script reads page text, applies your rules locally, and writes the result back. It does not exfiltrate page content anywhere.

Platform

• Manifest V3 (no remotely hosted code, service-worker background).
• No extra host permissions beyond the browsed page itself.
• Your rules live in browser storage. No account, no server copy.

Data

• Page text, inputs, and passwords never leave your device.
• Analytics are anonymous and aggregate (counts, not content).
• Error reports are scrubbed of page content and query strings.

Full details: Privacy.

Payments

Purchases go through our payment provider (ExtensionPay / Stripe) over their secure checkout. We never see or store card numbers.

Report an issue

Found something suspicious? Contact support. Include your extension version and where it happened, never passwords or private text.