TechScan AI icon
TechScan AI
Discover the Tech Behind Any Website

Privacy Policy

This policy explains what the TechScan AI Chrome extension does, and just as importantly what it does not do with your data.

Effective date: August 30, 2026 Applies to: TechScan AI, version 1.0.0 and later
No ads or trackers On-device scanning No data sold, ever

The short version

1. Overview

TechScan AI is a Chrome extension that detects the technologies behind a website (frameworks, analytics, hosting, CMS, and more) and audits that site's SEO, security headers, and page weight, with results explained by an on-device AI assistant. It is built as a local-only tool: every detector, every scoring rule, and every AI response runs inside your browser, on your device.

This policy is written to be read alongside the extension's actual permissions and code not as boilerplate. If a claim below ever stops matching what the extension does, treat the code as authoritative and please report it.

2. Data we collect

TechScan AI's core scanning features do not require sending your data to us. There is no analytics pipeline, advertising account, or logging service collecting information about your browsing for those features.

The extension itself does read certain data locally, in your browser, in order to produce a scan report on your screen:

Data read locallyPurposeLeaves your device?
Page HTML, scripts, meta tags, and DOM structure of the active tab Detect technologies and compute SEO/security/weight scores NO
HTTP response headers for the page's main document Security-header checks (CSP, HSTS, cookie flags, etc.) NO
Cookies set by the site you're viewing (names/flags only) Audit Secure/HttpOnly/SameSite flags, including on cookies JavaScript can't see NO
The active tab's URL and title Label the scan and show which site the report belongs to NO

All of the above is processed in memory and/or written to the extension's own local storage sandbox (see Local storage & retention). None of it is sent to a TechScan server, because no such server exists to send it to.

3. Data we do not collect

To be explicit, TechScan AI does not collect, transmit, or have any mechanism to collect:

Financial or payment information
Health information
Location data
Analytics, telemetry, or usage statistics
Advertising or tracking identifiers
Keystrokes, form inputs, or clipboard content

The current version of TechScan AI does not require an account or sign-in to use its core scanning features.

4. How scanning works

When you open the TechScan AI popup on a tab:

  1. A content script already running on that page (injected per the manifest's content_scripts declaration) reads the page's DOM, scripts, meta tags, and globals, and builds a snapshot.
  2. The extension's background service worker combines that snapshot with response headers and cookies it observed for that same page, runs its technology detectors and scoring rules, and produces a report.
  3. The popup displays that report. It is discarded or replaced by the next scan when you close the tab or navigate away, subject to the short-lived session cache described in Local storage & retention.

The one outbound network request the extension can make is a request for the current site's own manifest.json (its web app manifest) issued to that site directly, the same way your browser would request any other resource from a page you're already on. This request never goes to TechScan, and no response from it is sent anywhere but your own browser.

No other network requests are made by the extension. It does not "phone home," check for updates outside Chrome's own extension update mechanism, or fetch remote configuration, code, or ad content at runtime.

5. On-device AI

The "AI" tab uses Chrome's built-in AI Gemini Nano, accessed through Chrome's native Prompt API (available on Chrome 138+ on desktop). This model runs locally on your computer, as part of the browser itself. TechScan AI does not operate an AI service, does not hold an API key to one, and does not proxy your data to any AI provider (including Google, OpenAI, or Anthropic).

The scan data used to generate an AI explanation the detected technologies and audit results for the current page is passed to the on-device model directly within your browser and never leaves it for this purpose. If your browser or Chrome profile doesn't support the on-device model, the AI tab explains that plainly rather than silently falling back to a cloud service; the rest of the extension continues to work normally either way.

6. Permissions explained

Chrome requires every extension permission to be declared up front. Here is what TechScan AI requests and, honestly, why:

PermissionWhat it allowsWhy TechScan AI needs it
storage Read/write the extension's local, sandboxed storage Save your theme preference and cache the current tab's scan result. Never synced to an external server.
scripting Inject scripts into tabs Re-inject the page collector into tabs that were already open before you installed or reloaded the extension (normal content-script injection covers tabs opened afterward).
webRequest Observe request/response metadata Read the response headers of the page you're viewing the entire basis of the security audit (CSP, HSTS, X-Frame-Options, etc.). This permission lets TechScan read header data only; it cannot and does not modify, block, or redirect any request.
cookies Read cookies for the current site Audit HttpOnly cookie flags, which are invisible to page JavaScript (document.cookie) and therefore can only be checked through this API.
host_permissions: <all_urls> Run on any site you navigate to TechScan is a general-purpose scanner it needs to be able to analyze whichever site you choose to open it on, since there's no way to know that site in advance.

TechScan AI requests the permissions required to analyze the website selected by the user. Each permission is used for a specific scanning or analysis function described in this policy.

7. Local storage & retention

Uninstalling the extension removes all of the above, in line with Chrome's standard extension storage lifecycle. There is no server-side copy to delete because none was ever created.

8. Data sharing & third parties

TechScan AI does not share, sell, rent, or trade user data with third parties. Specifically, there are:

TechScan AI uses the information it accesses only to provide the scanning and analysis features described in this policy. It does not use this information for advertising, sell it, or transfer it to third parties.

9. Security

Because scan data itself never leaves your browser, the extension's core scanning features carry no server-breach risk for that data. Locally:

10. Children's privacy

TechScan AI is a developer/webmaster-oriented diagnostic tool and is not directed at children. It does not knowingly collect information from anyone, of any age consistent with the rest of this policy so no age-specific data collection occurs.

11. Your choices & controls

12. Chrome Web Store compliance

This policy is published in support of TechScan AI's listing on the Chrome Web Store and is intended to satisfy the disclosure requirements of the Chrome Web Store Developer Program Policies, including:

13. Changes to this policy

If TechScan AI ever changes what it collects or how it works for example, if a future version adds an optional cloud feature this policy will be updated first, the "Effective date" above will change, and the update will be described in the extension's Chrome Web Store listing and/or release notes. We will not silently expand data collection behind an unchanged policy.

14. Contact

Questions, concerns, or a claim in this policy that doesn't match what you observe the extension doing? Reach out: