05 / 07
Privacy & permissions.
Exactly what the extension reads.
The extension runs content scripts only on search engines, partner stores and Stocknet's own pairing page. It has no script anywhere else.
| Where | What is read | What is sent |
|---|---|---|
| Search engines | The query you typed; whether a click was on a sponsored result | query text, engine, advertiser domain |
| Amazon | Product page title; order-confirmation page | product title, 'order confirmed' |
| Other partner order pages | URL pattern match in the background (never stored) | partner name |
| Any page | Once-a-minute 'browser is active' check | nothing about the page |
Permissions
storage (session + cached balances), alarms (the heartbeat and refresh), webNavigation (partner order-page patterns), idle (so idle time never counts). Host access is limited to the listed sites and stocknet.family.
The full list lives on the privacy page and is what the store listings declare.