Browser Extension · Chrome & Firefox

Audit the stack from the network panel. Nothing leaves the browser.

Same engine as the HARstack tool. Now it reads the live page instead of an uploaded HAR. It runs in the DevTools panel, asks for zero permissions, and sends nothing anywhere.

Get the Extension Install Guide Use the HAR Tool Instead

Permission Footprint

Permissions requested at install: none.

The permission list is empty. No host permissions. No webRequest. No debugger, so Chrome shows no "started debugging this browser" banner. No background worker watching you browse. Network data comes from the DevTools panel, and response bodies through getContent(), which needs no extra grant on either browser. A privacy auditor that asks for nothing is the only kind that can make its own case without flinching.

Why a Panel, Not a Background Extension

The design that keeps the permission list near empty

Capture

DevTools network API

The panel reads the inspected tab's requests directly. No host permissions, because it never injects into pages or intercepts traffic in the background.

Response bodies

Body fingerprinting intact

CNAME and tag-injected vendors that URL matching misses still get caught. Bodies come through getContent() on Chrome and Firefox alike, with no debugger banner.

Same brain

The full HARstack engine

336 tracker signatures, CDP payload inspection, session-replay and CIPA framing, GPC verification from Sec-GPC headers, a consent timeline with per-tracker timestamps, loaded-by attribution, and the send-to routing. Generated from the same source as the tool.

Output

Report, JSON, CSV, HAR, AI prompt

Findings render expanded for clean printing. Export a sanitized HAR, the analysis JSON, a CSV that opens as real rows, or the disclosure-gap AI prompt: paste the site's privacy policy into it and ask your own AI whether the policy matches the pixels. Print to a counsel-ready PDF.

Install

Load it in two minutes. No store account required.

Chrome / Edge

Firefox

Download and unzip the release, then set the active manifest.

cp manifest.chrome.json manifest.json

Open chrome://extensions and turn on Developer mode.

Click Load unpacked and select the extension folder. It persists across restarts.

Open any page, open DevTools (F12), select the HARstack panel, browse, and press Analyze.

Set the active manifest.

cp manifest.firefox.json manifest.json

Open about:debugging#/runtime/this-firefox.

Click Load Temporary Add-on and pick manifest.json. For a permanent install, use a signed build (see the release notes).

Open any page, open DevTools (F12), select the HARstack panel, browse, and press Analyze.

Note: the panel captures requests made after DevTools is open. Use Reload & Capture to get everything from the first request.

Extension or HAR Tool

Keep both. They feed the same engine.

Extension

Live, on your own properties

Continuous capture across a session, GPC you can toggle, no upload step. Best for auditing sites you control and browse yourself.

HAR tool

Evidence, from anywhere

A frozen, hashable artifact anyone can produce, from a machine or browser you do not control. Best for producing an exhibit. Open the tool →