This policy explains what the TechScan AI Chrome extension does, and just as importantly what it does not do with your data.
chrome.storage API.TechScan AI is a Chrome extension that detects the technologies behind a website (frameworks, analytics, hosting, CMS, and more) and audits that site's SEO, security headers, and page weight, with results explained by an on-device AI assistant. It is built as a local-only tool: every detector, every scoring rule, and every AI response runs inside your browser, on your device.
This policy is written to be read alongside the extension's actual permissions and code not as boilerplate. If a claim below ever stops matching what the extension does, treat the code as authoritative and please report it.
TechScan AI's core scanning features do not require sending your data to us. There is no analytics pipeline, advertising account, or logging service collecting information about your browsing for those features.
The extension itself does read certain data locally, in your browser, in order to produce a scan report on your screen:
| Data read locally | Purpose | Leaves your device? |
|---|---|---|
| Page HTML, scripts, meta tags, and DOM structure of the active tab | Detect technologies and compute SEO/security/weight scores | NO |
| HTTP response headers for the page's main document | Security-header checks (CSP, HSTS, cookie flags, etc.) | NO |
| Cookies set by the site you're viewing (names/flags only) | Audit Secure/HttpOnly/SameSite flags, including on cookies JavaScript can't see |
NO |
| The active tab's URL and title | Label the scan and show which site the report belongs to | NO |
All of the above is processed in memory and/or written to the extension's own local storage sandbox (see Local storage & retention). None of it is sent to a TechScan server, because no such server exists to send it to.
To be explicit, TechScan AI does not collect, transmit, or have any mechanism to collect:
The current version of TechScan AI does not require an account or sign-in to use its core scanning features.
When you open the TechScan AI popup on a tab:
content_scripts declaration) reads the page's DOM, scripts, meta tags, and
globals, and builds a snapshot.The one outbound network request the extension can make is a request for the current
site's own manifest.json (its web app manifest) issued to that site directly,
the same way your browser would request any other resource from a page you're already on. This
request never goes to TechScan, and no response from it is sent anywhere but your own browser.
No other network requests are made by the extension. It does not "phone home," check for updates outside Chrome's own extension update mechanism, or fetch remote configuration, code, or ad content at runtime.
The "AI" tab uses Chrome's built-in AI Gemini Nano, accessed through Chrome's native Prompt API (available on Chrome 138+ on desktop). This model runs locally on your computer, as part of the browser itself. TechScan AI does not operate an AI service, does not hold an API key to one, and does not proxy your data to any AI provider (including Google, OpenAI, or Anthropic).
The scan data used to generate an AI explanation the detected technologies and audit results for the current page is passed to the on-device model directly within your browser and never leaves it for this purpose. If your browser or Chrome profile doesn't support the on-device model, the AI tab explains that plainly rather than silently falling back to a cloud service; the rest of the extension continues to work normally either way.
Chrome requires every extension permission to be declared up front. Here is what TechScan AI requests and, honestly, why:
| Permission | What it allows | Why TechScan AI needs it |
|---|---|---|
storage |
Read/write the extension's local, sandboxed storage | Save your theme preference and cache the current tab's scan result. Never synced to an external server. |
scripting |
Inject scripts into tabs | Re-inject the page collector into tabs that were already open before you installed or reloaded the extension (normal content-script injection covers tabs opened afterward). |
webRequest |
Observe request/response metadata | Read the response headers of the page you're viewing the entire basis of the security audit (CSP, HSTS, X-Frame-Options, etc.). This permission lets TechScan read header data only; it cannot and does not modify, block, or redirect any request. |
cookies |
Read cookies for the current site | Audit HttpOnly cookie flags, which are invisible to page JavaScript
(document.cookie) and therefore can only be checked through this API. |
host_permissions: <all_urls> |
Run on any site you navigate to | TechScan is a general-purpose scanner it needs to be able to analyze whichever site you choose to open it on, since there's no way to know that site in advance. |
TechScan AI requests the permissions required to analyze the website selected by the user. Each permission is used for a specific scanning or analysis function described in this policy.
chrome.storage.local stores your light/dark/system theme
preference. Persists until you remove the extension or clear it yourself; never leaves your
device.chrome.storage.session caches the current scan's response
headers and report in memory for the duration of your browser session, so re-opening the
popup on the same tab is instant. This is cleared automatically when you close your browser
and is never written to disk.Uninstalling the extension removes all of the above, in line with Chrome's standard extension storage lifecycle. There is no server-side copy to delete because none was ever created.
Because scan data itself never leaves your browser, the extension's core scanning features carry no server-breach risk for that data. Locally:
chrome.storage APIs, isolated per
extension by the browser.TechScan AI is a developer/webmaster-oriented diagnostic tool and is not directed at children. It does not knowingly collect information from anyone, of any age consistent with the rest of this policy so no age-specific data collection occurs.
chrome://extensions this removes all
locally stored data along with the extension.chrome://extensions → TechScan AI → "Remove," or simply by closing your browser,
which clears the session cache automatically.chrome://extensions details view, or by contacting us
(see Contact) with any question about this policy.This policy is published in support of TechScan AI's listing on the Chrome Web Store and is intended to satisfy the disclosure requirements of the Chrome Web Store Developer Program Policies, including:
If TechScan AI ever changes what it collects or how it works for example, if a future version adds an optional cloud feature this policy will be updated first, the "Effective date" above will change, and the update will be described in the extension's Chrome Web Store listing and/or release notes. We will not silently expand data collection behind an unchanged policy.
Questions, concerns, or a claim in this policy that doesn't match what you observe the extension doing? Reach out:
Email: arjishat@gmail.com