Last updated: 29 October 2026. Applies to version 0.1.0 and later.
Versione italiana più sotto.

In short: the extension sends nothing anywhere. Everything it reads stays in your
browser. What it keeps is deleted when you close the browser.


| What | Why | Where it goes |
| --- | --- | --- |
| Cookies of the site you are on, and of the third-party sites that page contacts: name, domain, expiry, whether other sites can read them (SameSite) | To show which cookies exist and which ones can recognise you | Processed in the browser. The browser also returns cookie values: the extension does not store them or show them |
| The addresses of the requests a page makes | To know which third-party sites the page contacts, and when | Only the host name (for example criteo.com) and the time are kept, not the full address |
| The address of the page you are on | To match the list of contacted sites to the page it belongs to | Kept in session storage (see below) |
| The consent signal of the site (IAB TCF), when there is one: whether you consented, how many purposes, "legitimate interest" | To know what the site recorded about your choice | Only the counts and the choice are kept |
| What you click on a page: the text, label and attributes of the clicked element, and the text around it | To recognise a click on "Reject" or "Accept" in a cookie banner | Checked on the spot. Only a click recognised as a banner choice is kept, with the button's label; every other click is discarded at once |


The extension uses the browser's session storage (storage.session). It lives in
memory and is deleted when the browser closes. It holds:

• for each open tab: the page address, the host names contacted and when (removed when the tab is closed);
• for each site where you made a choice: the choice, its time, the button label or the TCF counts;
• for each such site: a snapshot taken at the moment of the choice, with counts and the
  names and domains of the cookies that could recognise you then.

Nothing is written to disk storage, and nothing is synchronised with your account.

One exception, for a moment: when you click a choice in a banner, the extension also
keeps that choice (accepted or rejected, the time, the button's label) in the session
storage of the site you clicked on, so that it is not lost if the banner reloads the
page. It is removed as soon as the next page has read it, and ignored after two
minutes. The site can technically read it, but it only contains the choice you just
made on that site.

• It makes no network requests of its own. The cookie database ships inside the
  extension. The only link that leaves it (to the database's page on GitHub) opens
  only if you click it.
• No analytics, no telemetry, no advertising, no accounts.
• It does not sell, transfer or share any data, and does not use it for any purpose
  other than showing you the popup.
• It does not block or change requests, and does not click banners for you.

| Permission | Why |
| --- | --- |
| cookies | Read the cookies described above, including those the page itself cannot see (HttpOnly) |
| webRequest | Observe, without blocking, which sites a page contacts |
| storage | Session storage, as described above |
| Access to all sites (<all_urls>) | The extension must work on any site you visit; without it the browser hides cookies and requests |
| Content script on all pages | Read the consent signal and recognise clicks on cookie banners |


The use of information received from Google APIs will adhere to the Chrome Web Store
User Data Policy, including the Limited Use requirements.


Changes to this policy are recorded in the project's history on GitHub, with the date
at the top of this page. Questions: open an issue on the project's GitHub page, or
write to afterno.extension@gmail.com.