Pico Extensions Privacy Policy
Each Pico extension performs one action that you start with a click on the page you are viewing. Page content is read and analyzed locally in your browser. We do not sell your data, and we never send page content, URLs or browsing history to any server.
Extensions covered
- Pico UTM & Clean-Link Auditor
- Pico UI Spec & Tailwind Prompt Exporter
- Pico SOC 2 & M365 Evidence Snapper
- Pico eBay VeRO Listing Pre-Flight
- Pico Supplement Additive Auditor
Single purpose
Each extension performs one user-triggered action on the active tab and nothing else. It has no access to other tabs or sites and does not run in the background on pages you visit.
What stays on your device
Page text, links, tables, screenshots, URLs and audit results are processed in the browser with DOM parsing, regular expressions
and the built-in Web Crypto API. Results are stored only in chrome.storage.local on your device so the popup can show
them again. Uninstalling the extension deletes this data.
The free-use counter (a single number) is mirrored to chrome.storage.sync so a reinstall keeps your quota. Chrome
stores it in your own browser profile; it is never sent to us.
Anonymous usage analytics
To measure whether each extension is useful, it sends 4 anonymous funnel events to PostHog:
extension_installed, core_action_triggered, core_action_succeeded and
paywall_clicked. Each event carries only these properties:
| Property | Meaning |
|---|---|
distinct_id | A random install ID created on your device. It is not linked to your name, email or Google account. |
contender_id, version | Which extension and which version sent the event. |
is_paid | Whether Pro is unlocked. |
source | On paywall_clicked only: upgrade_button or quota_exhausted. |
gated | On core_action_triggered only: whether the action used the free tier. |
$ip: null, $geoip_disable: true | Tell PostHog not to record your IP address or location. |
No IP address, location, page content, URLs, names, emails or browsing history are sent. The PostHog project is configured to discard client IP data.
Payments and license keys
Upgrades are processed by Stripe Checkout in a normal browser tab. The extensions never see or store card details. Pro is unlocked with a license key that is checked offline with SHA-256, with no server call.
No ads or affiliate links
No Pico extension shows ads, sponsored links or affiliate links, and none injects content into the pages you visit beyond the result badge or highlight you trigger with a click.
Permissions
- activeTab: temporary access to the tab you are viewing, only after you click the extension.
- scripting: runs the bundled, packaged function on that tab to read the page and show the on-page result. No remote code is ever loaded.
- storage: saves the last result, the free-use counter and the cached license status on your device.
Limited use
- We do not sell or transfer user data to third parties, outside of the approved use cases.
- We do not use or transfer user data for purposes unrelated to the single purpose of each extension.
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Children
The extensions are not directed at children under 13 and do not knowingly collect information from them.
Changes and contact
If this policy changes, the updated version will be published at this address with a new date. Questions or deletion requests for the anonymous install ID: use the support contact on the extension's Chrome Web Store listing with the subject "Pico privacy".