Privacy Policy

Last updated: September 5, 2026

Userscripts+ is a userscript manager for Chrome (Manifest V3) with a built-in security recon and network inspection panel. This policy explains what data the extension accesses and, most importantly, what it does not do with it.

Summary

• Userscripts+ does not collect, transmit, or sell any of your data to the developer or any third party.
• There is no analytics, telemetry, or crash reporting of any kind.
• Everything the extension reads (userscripts, cookies, page storage, network requests) is processed entirely on your device and stays there, stored locally in your browser via chrome.storage.local.
• The extension has no backend server. It does not run one, and it does not talk to one.

What the extension can access, and why

These features only act on a page when you have that page open and use the relevant panel: nothing runs silently in the background beyond scheduled userscript update checks.

• Userscripts you install: their code, metadata, settings, and GM_* storage values are saved locally so they run reliably, including offline.
• Cookies: the Security panel lets you view, edit, add, or delete cookies for the site you're currently inspecting, for your own recon/debugging purposes.
• Page storage: the Security panel can read and edit a page's localStorage/sessionStorage at your request.
• Network requests: the Network panel captures fetch/XHR activity on the active tab so you can inspect and, if you choose, replay edited responses via a generated userscript.
• Active tab / all sites: the extension requests access to all URLs because userscripts, and the recon/network tools, can be used on any site you choose; it does not automatically read or act on sites you haven't opened or engaged the relevant panel on.
• Userscript sources: if a userscript declares an @require library or an @updateURL/@downloadURL, the extension fetches that URL (one you or the userscript author specified) so the script has its dependencies and can be updated. This is the only outbound network activity initiated by the extension itself, besides requests made by userscripts you've installed using their own GM_xmlhttpRequest-style calls.

Third-party lookups

The Overview panel's DNS, subdomain, and hosting lookups query public third-party services (such as Google's public DNS-over-HTTPS resolver, crt.sh, and ipapi.co) for the domain of the site you're currently inspecting. These are read-only lookups about a public domain name, not about you, and no personal data is sent to them beyond the domain being queried.

Data we do not collect

• No personally identifiable information
• No health, financial, or payment information
• No passwords or authentication credentials are transmitted anywhere by the extension itself
• No browsing history is logged or transmitted off your device
• No data is sold, shared, or used for advertising or credit purposes

Changes to this policy

If this policy changes, the "Last updated" date above will change accordingly. Material changes will also be reflected in the extension's Chrome Web Store listing.

Contact

Questions about this policy or the extension's data handling can be sent to usersciptsplus@devjakob.com.