[drcode]

Question to extension devs: When Chrome warns me that an extension can "read all the websites I visit" does that mean it can also send that info to an external server, or just that the sandboxed extension on my local machine can read that data?

[redpanda_ua]

Thanks for the question, developer here.

I need to read all websites you visit, to check them against your blocked list. I do not save any data outside of local storage on chrome. In fact I am pro-privacy, so I opted out of using chrome.sync, to sync the data between Chromes on different devices. Because it's 3rd party cloud.

Since I made this extension open-source, you can check if my claims are true here: https://bitbucket.org/redpandaua/distractoff

(Sorry for messy code, 1st time real JS development for me, refactoring and documenting is on it's way.)

[tkazec]

Not the developer, but I've made extensions – there is a sandbox in the form of CSP, but if an external server is included in the policy, there are no restrictions.