Privacy Policy

Last updated: May 2026

      The short version: Tech Stack Detector reads the current page's content only when you click its toolbar icon, identifies the technologies running on that page, and shows them to you. Nothing about you or the pages you visit is sent anywhere or stored beyond the current scan.
    

What Tech Stack Detector does

Tech Stack Detector is a browser extension that identifies the web technologies — frameworks, libraries, content management systems, analytics tools, payment processors, hosting providers, and similar — running on the website displayed in your active tab. When you click the toolbar icon, the extension reads signals from the page, compares them against a locally stored database of public technology fingerprints, and shows a categorised list of what was detected. Optionally you can copy or download the results as text, JSON, or CSV.

What data is accessed

When you click the toolbar icon, the extension temporarily accesses the following on the current tab only:

The URL of the active tab, used to scope the scan to that page.
The page's DOM — script tags, meta tags, link tags, and a snippet of the rendered HTML and text.
The page's response headers, captured via a same-origin HEAD request.
JavaScript global variables exposed by libraries on the page (for example jQuery, Shopify).
Cookies set for the current page; names and values are matched against a fixed list of public technology fingerprints and then discarded.

All access happens only on a user-initiated click. The extension does not run continuously in the background, does not read from tabs you are not currently viewing, and does not record your browsing history.

What data is NOT collected or stored

No personal information (name, email, address, age)
No account or authentication data
No financial or payment information
No health-related data
No personal communications
No location data
No browsing history is stored or tracked
No user activity such as clicks, typing, or behaviour tracking
No website content is persisted after the popup closes

Storage

The only thing the extension stores on your device is the public technology signature database (approximately 2.5 MB of JSON) and small bookkeeping fields about it: its version string, last-update timestamp, and content hash. This database is required to match page content against known fingerprints; storing it locally means scans are fast and work offline. Scan results, accessed cookies, page content, and the URLs you visit are never persisted.

Data sharing

The extension has no analytics, no telemetry, no advertising integrations, and no third-party SDKs. It does not transmit data about you or the pages you visit to any server. The only outbound requests it makes are described in the next section.

Network requests

The extension makes two kinds of outbound request, and neither contains any data about you or the pages you visit:

Signature database sync — once per day, the extension fetches a small version manifest from https://customsaas.co.uk/tech-stack/api/version.json and, when the database has changed, the database file itself from the same domain. These are static, unauthenticated GET requests for the same files served to every user.
Vendor icons — when a technology appears in the popup, the extension may fetch its small icon (SVG or PNG) from https://raw.githubusercontent.com/enthec/webappanalyzer/main/src/images/icons/. These are static image requests with no user data attached. Standard browser caching applies.

Clipboard usage

When you click a technology row, or use the Export menu to copy as text, JSON, or CSV, the extension writes the corresponding text to your clipboard. The clipboard write happens entirely on your device and only when you explicitly request it. No copy of the data is sent anywhere.

Permissions explained

storage — to keep the technology signature database on your device so scans are fast and work offline.
alarms — to schedule the daily database refresh.
activeTab — to access the current tab only when you click the toolbar icon.
scripting — to inject the small scraper scripts that read page signals on click.
cookies — to read cookie names and values for fingerprint matching on the current tab only.
host_permissions: customsaas.co.uk — to fetch the signature database.
host_permissions: raw.githubusercontent.com — to fetch vendor icons.

Open source upstream

The technology signature database is mirrored from the open-source project enthec/webappanalyzer, licensed GPL-3.0. The extension itself is licensed under GPL-3.0 to match.

Children

Tech Stack Detector does not knowingly collect any data from users, including children under the age of 13.

Changes to this policy

If this policy changes, the new version will be published at this URL with an updated "Last updated" date above. The extension's behaviour will never change in a way that broadens data access without a corresponding update here and a new extension version.

Contact

For questions regarding this privacy policy, use the support link provided on the Chrome Web Store listing.