Skip to main content

Cookie Audit privacy policy

In short

Cookie Audit collects no data, transmits none, and talks to no server, neither mine nor anybody else's. All processing happens in your browser, on your own device.

Google Chrome extension. Last updated: 14 September 2026.

In one sentence

Cookie Audit collects no data, transmits none, and talks to no server, neither mine nor anybody else’s.

Who publishes this extension

Guillaume SEBAG, sole trader registered in Canada, province of New Brunswick. For any question about this extension: contact form

What the extension processes, and where

Cookie Audit reads the cookies and local storage keys of the website you are visiting, in order to show them to you. All of that processing happens in your browser, on your own device. None of this information is sent over a network.

Concretely, the extension reads:

  • the name, domain and path of the visited site’s cookies;
  • their expiry date and technical attributes (Secure, HttpOnly, SameSite, partition key);
  • the keys of the visited site’s localStorage and sessionStorage, never their contents;
  • the label of the button you click in the cookie banner, truncated to 120 characters;
  • the text of the site’s privacy policy page, when you ask for it to be compared with the observed cookies.

About cookie values. Chrome’s programming interface hands over the value of every cookie, and there is no way to decline it. Cookie Audit uses it solely to compute the cookie size shown on screen. That value is never displayed, never exported, never stored, never transmitted. This is a deliberate precaution: a cookie value can contain a session token.

What the extension does not do

  • It creates no account and asks for no sign up.
  • It uses no analytics, no telemetry, no automatic error reporting.
  • It loads no code from a remote server. Its cookie databases are bundled inside the extension package.
  • It does not follow your browsing and keeps no history of the sites you visit.
  • It sells, rents and shares no data, since it collects none.

The changes the extension makes, and when

When you start a clean state audit, and only after ticking a confirmation box on a screen that spells it out, the extension:

  • deletes the cookies of the site you are auditing, and of its subdomains;
  • clears that site’s local storage;
  • reloads the page.

One consequence to know about: you will be signed out of that site if you were signed in. No other site is affected, and none of these actions is ever triggered automatically.

The only network connection made

When you ask for the comparison with a site’s privacy policy, the extension opens that site’s policy page in a background tab, reads its text, then closes the tab. It is ordinary navigation, identical to what would happen if you clicked the link yourself. No data leaves with the request.

What is stored on your device

  • The audit in progress: in memory only (chrome.storage.session), erased when the browser closes.
  • The last ten reports generated: on your disk (chrome.storage.local), so you can reopen them. You can erase them by uninstalling the extension.
  • Your display preferences: language, French or English, and legal area, Europe, Quebec or Canada.

None of this leaves your device.

The files you export

The CSV and JSON exports and the PDF reports are created on your own computer by your browser. They belong to you. If you pass them on to someone, be aware that they contain the names and domains of the audited site’s cookies, as well as the technical context of your machine, browser, operating system, time zone, window dimensions, that context being what makes a report reproducible.

Permissions requested, and why

Permission Reason
Access to all sites The extension audits whichever site you choose to visit. No domain being predictable in advance, general access is necessary. It only reads the cookies of the site being visited.
Cookies Reading the site’s cookies to inventory and categorise them, and deleting them during a clean state audit, after your confirmation.
Scripting Observing cookie placements on the audited site, clearing its local storage during a clean state audit, and reading its privacy policy page.
Storage Keeping the audit in progress, your preferences and your latest reports, on your own device.

Your rights

Since the extension holds no data about you, there is nothing on my side to access, correct or delete. To erase what it has stored locally, uninstall it: Chrome then removes its storage in full.

Children

This extension is aimed at web professionals and is not intended for children. It collects no data, whatever the age of the user.

Changes to this policy

Any change will be published on this page with a new update date. Should a future version of the extension ever transmit data, which is not planned, it would be announced here and in the Chrome Web Store listing before the update.

Contact

For any question about this policy or about the extension: contact form