Privacy Policy

The Renifler extension detects the technologies a website is built with. Here is exactly what it does and doesn't do:

• Detection is computed in your browser. The page's technology “signals” — script sources, global variables, meta tags, cookie names and HTTP response headers — are analysed locally by a WebAssembly engine bundled in the extension. The list of technologies is computed on your machine, not on our servers, and no page content is ever sent to us.
• The toolbar badge. By default the extension shows a technology count on its toolbar icon for the site you're on, using the same local analysis as the popup. This needs access to the pages you visit — but it only reads each page's technology signals; it does not record or transmit your browsing history. You can turn the badge off anytime in the extension's settings.
• Company & SaaS intelligence uses DNS. To identify the company behind a site and the services it runs (email provider, payments, CRM, e-signature…), the extension looks up the site's public DNS records (MX, TXT, NS…) through renifler's own DNS endpoint. Only the domain you're viewing (e.g. example.com) is sent — never your identity, your session, or the rest of your browsing.
• Optional company lookup (signed in). If you use the paid company-intelligence feature, the extension additionally sends that same domain and your Renifler session token to our API to return public company information. This only happens for the lookup you request.

Permissions, and why each is needed:

• activeTab + scripting — read the current page to detect its technologies.
• tabs — know the URL/domain of the tab you're on so results are labelled correctly.
• webRequest — read the current page's HTTP response headers (server, CDN, framework…) for header-based detection. Headers are matched locally and never stored or transmitted.
• cookies — read your renifler.io session so signed-in features work.
• storage — remember your local preferences (e.g. the badge toggle).
• Host access (<all_urls>) — needed so detection and the toolbar badge work on whichever site you visit. The extension only reads the current page's technology signals; it never collects your browsing history. The only servers it contacts are our own renifler.io / api.renifler.io (for DNS and company lookups) — no third-party services.

When you create an account or use the web app, we process the data you provide (name, email) and standard technical data (IP, browser, cookies) to run the service, authenticate you, and provide the features you use. We use privacy-respecting analytics to understand aggregate usage.

• We do not track, log, or store the list of websites you personally browse.
• We do not sell your personal data or your browsing activity to anyone.
• We do not send page content to our servers — technologies are computed locally from the page's signals and headers. The only thing that ever leaves your browser is a domain (for the DNS and company lookups described above).

Renifler's web app provides company information (identity, public contacts, technology) aggregated from public sources and official registries. This concerns businesses, not the extension's users. Where this data includes personal information about company representatives, it is processed on a legitimate-interest basis, and individuals can request suppression by contacting us.

You can access, correct, export or delete your account data at any time, and you can uninstall the extension to stop all local processing. If you are in the EU/EEA, you have the rights granted by the GDPR (access, rectification, erasure, portability, objection). To exercise them, contact us.

Questions about this policy or your data? Email privacy@renifler.io.

← Back to the extension