Privacy policy
Summary
- The browser extension analyzes pages on your device. It does not upload page HTML, meta tags, or screenshots to OGKit servers.
- We do not collect browsing history, and we do not sell personal data.
- Optional website permissions are never granted at install; you approve one origin at a time when a feature needs it.
- If you submit a public URL to the website scanner, our servers fetch it to produce a report. This is separate from extension-local analysis.
Who we are
OGKit provides Open Graph and social-share diagnostics through https://ogkit.akr.moe and a browser extension for Chromium and Firefox.
For privacy questions, open an issue at github.com/AkaraChen/ogkit or use the contact path on Consulting.
Browser extension
Data processed locally
When you invoke the extension on a tab or start a scan, it may read:
- Share-related meta tags and DOM from the active tab
- URLs and HTML you ask it to fetch on localhost or private networks, after optional host permission
- Image responses used for
og:imagehealth checks - Panel preferences and in-progress task state in browser extension storage on your device
This processing runs in your browser. We do not receive page content from these flows.
Data that may leave your device
| Action | What leaves | Destination |
|---|---|---|
| You open a public URL in the website scanner | The page URL, in a browser navigation you initiate | ogkit.akr.moe; the website fetches that public URL server-side |
| You use the website with the extension bridge enabled | Messages between ogkit.akr.moe and the extension stay in the browser | No page-body upload to our servers for bridge scans |
| You run multi-platform rescrape | The browser opens selected official debugger pages; the extension reads preview DOM on your device | Third-party debugger hosts only; results stay in local extension storage |
| You visit ogkit.akr.moe | Standard web-server logs | Our hosting provider |
The extension does not implement background telemetry, analytics SDKs, or advertising identifiers.
Permissions
Install-time permissions are limited to on-demand analysis APIs: activeTab, storage, scripting, declarativeNetRequest, and Chrome offscreen. No host permissions are granted at install.
Optional host access is requested only when you invoke a feature that needs it, such as http://localhost:3000, the https://ogkit.akr.moe bridge, or selected official debugger hosts. Results stay on this device, and grants can be revoked in the extension or browser settings.
Website (ogkit.akr.moe)
Public URL scanning
If you submit a URL to the website scanner:
- Our servers fetch it under an SSRF and public-URL policy; private addresses are not scanned server-side.
- Scan results are returned to your browser. We do not store report snapshots or permanent report links.
- Do not submit URLs that expose secrets in the path or query string.
Server logs
HTTP access logs may include IP address, user agent, path, and timestamps for security and reliability. We do not use them for advertising profiles.
Cookies
We keep first-party cookies minimal. Future authentication or preference cookies will be described here before they are enabled.
Sharing
We do not sell personal information. We may share data only:
- With infrastructure providers that process it on our instructions, such as hosting and DNS
- If required by law
- To protect the service or its users
Retention
- Extension local storage: until you clear extension data or uninstall
- Website reports and logs: as long as required for the feature and operational security, then deleted or aggregated
Your choices
- Uninstall the extension to remove its local storage, subject to browser behavior
- Revoke optional host permissions in the extension or browser
- Use the browser extension for private or sensitive targets so analysis stays on your device.
- Do not submit sensitive URLs to the public scanner
Changes
We will update this policy and its last-updated date when practices change. Material changes affecting store declarations will ship with extension listing updates.