Privacy Policy

Last updated: June 2026

1. Who we are

StackSight is a free, open-source Chrome Extension developed and maintained by volunteer contributors. The source code is publicly available at github.com/vetrisuriya/stacksight. There is no company, no LLC, and no commercial entity behind this extension.

2. Data we do NOT collect

StackSight does not collect, store, transmit, sell, or share any of the following:

• URLs or domain names you visit
• Browsing history or browsing patterns
• Personally identifiable information of any kind
• IP addresses
• Device identifiers or hardware information
• Login credentials or authentication tokens
• Form data, passwords, or payment information
• Cookies set by websites you visit
• Any data from web pages you visit

3. What happens when you use StackSight

When you click the StackSight icon on a tab, the following happens entirely inside your local browser:

• DOM inspection: A content script reads the HTML structure of the current page (script tags, link tags, meta tags) to identify technology fingerprints. This data is processed in memory and immediately discarded after rendering.
• JavaScript global inspection: A script runs in the page's own context to check for known global objects (e.g. window.React). This data never leaves the browser tab.
• HTTP headers: The background service worker makes a HEAD request (falling back to GET) to the same URL you are already visiting — not to any external server — to read its response headers. This is the only outbound network request, and it goes to the site you're already on.

All processing happens in your browser's memory. Results are displayed in the popup and optionally downloaded as a local file. No results are stored, synced, or sent anywhere.

4. Permissions explained

StackSight requests the following Chrome permissions and only uses them for the stated purpose:

• activeTab — Required to read the current tab's URL and inject the analysis scripts. Only activates when you click the extension icon.
• scripting — Required to execute DOM inspection and JavaScript global inspection on the active page.
• tabs — Required to read the current tab's URL and title for display and export file naming.
• host_permissions (<all_urls>) — Required by the background service worker to make the HEAD request to the page you are already visiting, in order to read its HTTP response headers. No cross-site requests are made.

5. Local storage

StackSight uses localStorage to save a single user preference: your chosen UI theme (dark or light). This value is stored in your browser only, never transmitted, and you can clear it at any time by clearing your browser's local storage.

No other data is stored anywhere — not in chrome.storage, not in cookies, not in IndexedDB.

6. Third-party services

StackSight does not use or connect to any third-party services, APIs, analytics platforms, CDNs, or cloud services of its own. It has no backend.

7. Exported reports

If you choose to export a JSON or TXT report using the Export buttons in the popup, that file is downloaded directly to your device using a browser Blob URL. It is never sent to any server. You are in full control of that file after it is downloaded.

8. Children's privacy

StackSight is a developer tool and is not directed at children under the age of 13. We do not knowingly collect any information from children because we do not collect any information from anyone.

9. Changes to this policy

If this privacy policy ever changes, the updated version will be published at this URL and the "last updated" date at the top will be revised. The Git history of the repository also serves as a full audit trail of any changes.

10. Contact

Questions about this privacy policy? Open an issue on GitHub: github.com/vetrisuriya/stacksight/issues