CUSTODIAN
Privacy
What leaves your browser: nothing.
Not a summary of a longer legal document. This is the whole policy: specifics on what Custodian can see, what it can't, and where everything it knows is stored.
What Custodian can see
- The URL and origin of your open tabs, to know when the last tab for a site has closed
- Which cookies, storage, and cache entries belong to a given origin, so it can clear them
- Which permissions Chrome has recorded as customized for a site (camera, microphone, location, and so on)
- Your own settings: whitelist, greylist, grace period length, Shield Mode state
- Its own activity log, the receipts, that it writes locally after each cleanup
What it can't see
- Page content: what's on the screen, what you type, what you click
- Passwords, form input, or clipboard contents
- Your browsing history beyond which tabs are currently open
- Anything about you as a person: no name, no email, no identifier of any kind
- Any of the above from any other extension or from Chrome itself
Where it's stored
Everything Custodian knows, your whitelist, your greylist, your settings, the receipts it writes, is stored using Chrome's local storage API, on your machine, tied to your browser profile. There's no server, no database, and no sync service on Custodian's end. Uninstalling the extension removes all of it.
What leaves your browser
Nothing. Custodian makes no network requests of any kind: no analytics, no crash reporting, no remote configuration, no update check beyond the one Chrome itself performs for every extension. If your network traffic monitor shows Custodian talking to anything, that's worth reporting, because it isn't supposed to.
Why it needs broad host permissions
Custodian requests access to all sites rather than a specific list, because it has no way of knowing in advance which site you'll close a tab for next. The permission is what lets it watch tab-close events and clear storage across any site, not a small set chosen ahead of time. It's a wide permission used for a narrow, consistent purpose: nothing is read or sent, only cleared, and only after you've closed a site's last tab.