Privacy Policy

Last updated: September 1, 2026

Extension Health Checker ("the extension") helps users audit the security and health of their installed browser extensions. This privacy policy explains exactly what data the extension accesses, where it goes, and your rights.

1. What data stays on your device

All core scanning happens locally in your browser. The extension reads your installed extensions' metadata (name, ID, version, enabled state, requested permissions) via the Chrome management API, analyzes it on your device, and displays the results. The following data is stored locally using chrome.storage.local and never leaves your browser unless explicitly stated below:

• Extension scan results and history (installs, updates, uninstalls, and permission changes — up to 500 entries)
• Your Pro license key and its cached validation status
• Your settings (e.g., weekly auto-scan preference)

2. What data is transmitted (Pro license verification only)

The extension makes network requests only when you choose to activate Pro by entering a license key (and for occasional silent revalidation of an already-activated license). The request goes to a small license-validation endpoint operated by the developer (https://ehc-license.tingstudio.workers.dev), which forwards it to our payment processor, Creem. The request contains:

• The license key you entered
• A random, anonymous device identifier generated on first activation (used only to enforce the one-device license limit)

This is used solely to verify that your purchase is valid and to track which device the license is activated on. The endpoint receives no browsing data and no personal information. Payments are processed entirely by Creem on its own hosted checkout pages; Creem handles payment data under its own privacy policy (https://www.creem.io/privacy-policy). Free features make no network requests at all.

3. Data the extension does NOT collect

• No browsing history
• No website content, form inputs, or keystrokes
• No personal information (name, email, address)
• No financial or payment information (payments are handled entirely by Creem on its checkout pages)
• No analytics, no crash reports, no advertising identifiers, no tracking of any kind

4. Permissions and why they are needed

• management — Core functionality: lists installed extensions, reads their permissions/metadata, and enables, disables, or uninstalls them at your explicit request.
• storage — Stores scan history, settings, and license status locally.
• alarms — Schedules the optional weekly auto health check (Pro feature).
• notifications — Shows desktop notifications for weekly scan results and extension permission-change alerts (Pro feature).
• Host permission: https://ehc-license.tingstudio.workers.dev/* — The developer's lightweight license-validation endpoint, which forwards activation/validation requests to Creem. Used exclusively to activate and verify Pro license keys. No other domains are accessed.

5. Data retention and deletion

All locally stored data remains on your device until you clear the extension's storage or uninstall the extension. Scan history is automatically trimmed to the most recent 500 entries. Uninstalling the extension removes all associated data.

6. Children's privacy

The extension does not knowingly collect any data from children and contains no age-gated content.

7. Changes to this policy

If this policy changes, the updated version will be posted at this URL with a revised "Last updated" date.

8. Contact

Questions about this privacy policy? Contact: tingstudio.ai@gmail.com