Privacy Policy

Last updated: February 22, 2026

This Privacy Policy describes how the Mine.Organic: SEO Vision Chrome extension (“the Extension”) handles your data. We are committed to transparency and to protecting your privacy.

1. Data Collection

The Extension does not collect, store, or transmit any personal data. All page analysis is performed locally in your browser. No analytics, telemetry, or tracking of any kind is included.

The Extension does not:

• Collect browsing history or page content for any purpose beyond the immediate on-screen audit
• Use cookies or tracking pixels
• Include advertising or third-party analytics scripts
• Require an account or sign-up
• Fingerprint your browser or device

2. Permissions and Why They Are Needed

The Extension requests the following Chrome permissions, each strictly necessary for its functionality:

Permission	Purpose
sidePanel	Render the audit UI in the browser side panel.
tabs	Access the URL and title of the active tab to identify the page being analyzed.
activeTab	Inject the analysis script into the currently active tab when the user initiates an audit.
scripting	Execute the SEO analysis function (analyzeSEO()) within the page context to read DOM elements, meta tags, headings, links, images, etc.
storage	Persist user preferences (theme, language, auto-analyze setting) via chrome.storage.sync (with local fallback). No personal data is stored.
webRequest	Observe response Content-Type headers for images loaded by the page. This is used to classify image formats (WebP, AVIF, SVG) by MIME type without making any additional network requests.
host_permissions: <all_urls>	Allow analysis and network checks (robots.txt, sitemap, HTTP headers, broken links) on any website the user navigates to. The Extension never accesses a page unless the user explicitly triggers an audit.

3. External Network Requests

When the user runs an audit (or enables “Deep checks”), the Extension may make the following external requests. All requests are initiated only by explicit user action (clicking “Analyze” or “Deep checks”) or when auto-analyze is enabled by the user.

3.1 Site-specific checks

• robots.txt — GET {origin}/robots.txt
• Sitemap discovery — HEAD {origin}/sitemap.xml, HEAD {origin}/sitemap_index.xml, plus sitemaps referenced in robots.txt
• HTTP headers — HEAD {pageUrl} (for cache, security, and compression headers)
• Broken link checks — HEAD {internalLinkUrl} (batched, only internal links)
• Hreflang validation — GET {hreflangHref} (limited sample to verify return links)
• Single Entry Point (SEP) audit — POST https://sidebar.mine.organic/headers/ (checks domain redirect variants via a server-side probe to avoid browser HSTS artifacts)

3.2 Third-party APIs

• DNS over HTTPS — queries dns.google and cloudflare-dns.com for A, AAAA, MX, NS, CNAME, and PTR records of the audited domain
• SSL certificate probe — GET https://sidebar.mine.organic/ssl-probe/?host={hostname}&ip={ip} (checks certificate validity per IP)
• Certificate Transparency — GET https://crt.sh/?q={hostname}&output=json (discovers subdomains from CT logs)
• Wayback Machine — GET https://archive.org/wayback/available?url={pageUrl} (checks archive availability)
• IndexNow — pings api.indexnow.org, bing.com/indexnow, and yandex.com/indexnow (only when the user explicitly triggers it)

3.3 Mine.Organic services

• Content upload — POST https://api.mine.organic/upload-content (only when the user explicitly clicks “Send Content”; sends the current page URL and extracted text)

No request carries cookies, authentication tokens, or personally identifiable information. The Extension does not track which sites you visit unless you actively run an audit.

4. Data Storage

The Extension stores only user preferences via chrome.storage.sync (synced across your Chrome profile) with a fallback to chrome.storage.local. Stored settings include:

• Theme preference (dark/light)
• Auto-analyze toggle
• UI language selection (en, es, fr, pt, ru)
• Font size preference
• Pinned sections
• Content exclusion options

No audit results, page content, or URLs are persistently stored by the Extension.

5. Third-Party Services

The Extension communicates with the following third-party services during audits:

• Google Public DNS (dns.google) — DNS resolution
• Cloudflare DNS (cloudflare-dns.com) — DNS resolution
• crt.sh (operated by Sectigo) — Certificate Transparency logs
• Wayback Machine (archive.org) — page archive availability
• IndexNow (indexnow.org, bing.com, yandex.com) — URL indexing notifications

Each service has its own privacy policy. The Extension sends only the information strictly necessary for the audit (hostname, IP address, or page URL) and does not include any personal data.

6. Children’s Privacy

The Extension is not directed at children under 13 and does not knowingly collect any personal information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Last updated” date. We encourage you to review this page periodically.

8. Contact

If you have questions or concerns about this Privacy Policy, please contact us at:

mineseorganic@gmail.com