HiddenThings — Privacy Policy

Last updated: 2026-07-04

What HiddenThings does

HiddenThings is a browser extension that checks whether the website you are currently visiting exposes standard or sensitive files (for example robots.txt, security.txt, exposed configuration or credential files). It does this by sending HTTP requests directly from your browser to that same site.

Data collection

HiddenThings does not collect, transmit, or sell any personal data. It does not use analytics, trackers, or any remote server operated by the developer. Nothing you do in the extension is sent anywhere except to the website you are already browsing (to check whether a given file exists there).

Local storage

Your settings (theme, enabled scan modes, custom path list, popup size, accent color) and the results of recent scans are stored locally in your browser using the standard chrome.storage API. This data never leaves your device and is not accessible to the developer or any third party.

Permissions

• Host access (all sites) — required to check for files on whatever site you are currently browsing.
• storage — saves your settings and caches scan results locally.
• activeTab — reads the URL of the active tab to know what to scan.
• downloads — lets you download a file the extension found, on your request.
• scripting — reads the list of script tags on the active tab for the optional source-map check.

Third parties

No data is shared with any third party. HiddenThings contains no remote code and no external script or analytics dependency.

Contact

Questions about this policy: open an issue on github.com/camael-off/hidden_things.