M MurmMargin

Privacy policy

Effective 18 August 2026 · applies to the MurmMargin browser extension, published by MurmTools.

MurmMargin sends nothing about you or the pages you read. It stores one thing, the price a listing declared, so it can tell you when a supplier moves it, and that stays on your device. It has no server of its own, no analytics and no tracking. The one host it declares is extensionpay.com, the licensing service MurmTools uses. This page explains exactly how each of those is true rather than asking you to take it on trust.

What the extension does

When you click the MurmMargin icon on a supplier listing, it reads the prices that page declares in its machine layer — structured data, price metas — and gives you a live calculator: landed cost built the way customs charges it, your margin at the sell price you type, and the ad spend you can afford per sale before the unit loses money. Everything you type stays in the panel and is gone when it closes. If you have seen the listing before, it also tells you what the declared price did since.

What it stores, and where

MurmMargin remembers one thing, because the finding it exists for — a supplier quietly raising the unit price between your visits — is invisible unless you compare one visit to the next.

StoredWhy
The listing’s host and pathTo find the record again next time you open that listing.
The cheapest declared price, and its currencySo the next visit can say whether the supplier moved it.
A timestampBecause “up 12% since 14 days ago” needs to know when you looked.

The one origin it can reach

The manifest declares a single host permission, https://extensionpay.com/*, plus a content script that runs on that origin and on no other. ExtensionPay is the licensing service MurmTools uses, and the extension asks it whether a licence is current. No other origin is reachable even in principle. MurmMargin itself is free: it has no paid tier, so there is nothing in it to buy.

What that traffic does not carry: the page you are reading, the prices it found, the sell price you typed, the suppliers you saved, or anything about the sites you visit. Those never leave your device.

The panel's own footer says this, in the product, on every read: “Reads only this page, on your machine. The one thing sent anywhere is a licence check to extensionpay.com.” A build script fails the release if that sentence and the extension's permissions ever disagree, in either direction.

The stored record described above is the whole record. No page text, no prices, no URLs beyond host and path, no identifiers of any kind. It lives in chrome.storage.local, your browser and your device, capped at three hundred listings, with the oldest dropped when the cap is reached. None of it is ever transmitted. The licence check is the extension's one network destination, and this record is not part of it.

To erase it, remove the extension. Everything it stored goes with it.

Reading a listing makes no network request of its own. It reads the page that is already open and writes to storage on your own device.

Permissions

PermissionWhy it exists
activeTab Grants temporary access to the single tab you clicked the icon on, and only at that moment. It is used to read the figures already published on that page. The access ends with the tab.
scripting Runs one read-only function, once, in that tab. The function is bundled in the extension. It reads the page's structured data — JSON-LD offers and price metas — once. It does not modify the page, attaches no listeners, and does not persist after returning its result.
storage Remembers one previous reading per listing, so this visit can be compared with the last. The exact contents are listed above. Local to your device, capped at three hundred listings.

There is one host permission, https://extensionpay.com/*, and it exists only for the licence check. MurmMargin has no standing access to any other website: it cannot read a page until you click its icon on that page, it cannot run in the background on the sites you browse, and it never touches another tab.

Data we collect

None. Collection means transferring data off your device to us. There is no MurmTools server and no code path that reaches one: no analytics call, no error report, no beacon. Nothing about the pages you read, the prices found on them, the sell price you type or the suppliers you save is sent anywhere.

Data we store

One record per listing, on your device, and nothing else. The storage permission is requested for exactly that. Its contents are the three fields listed in the table above, it lives in chrome.storage.local, it is capped at three hundred listings with the oldest dropped when the cap is reached, and it is never transmitted. Remove the extension and it goes with it.

Third parties

One: ExtensionPay, the licensing service, which is the single origin the extension can reach. No analytics, no error reporting, no A/B testing, no advertising.

Even the typefaces are bundled inside the extension rather than fetched from a font host. A tool that reports what a page loads should not quietly load something itself.

What MurmMargin will not tell you

It does not tell you whether the product will sell. That is not on the page and not computable, so the panel prints an em-dash and the reason. Duty is applied as a band for the category the page itself declares — both edges printed — because the true rate is set by a tariff classification no browser extension performs. Every assumption the figures rest on is written next to them at the same size. And the price comparison never crosses a currency switch: inventing an exchange rate would manufacture a price change out of thin air.

Children

MurmMargin is a publishing and development tool. It is not directed at children and collects no data from anyone, of any age.

Changes

If this policy ever changes, the effective date above changes with it. Since the extension collects nothing, any change would be a narrowing rather than a broadening — and if that ever stopped being true, it would be stated here before it shipped.

Contact

Questions about this policy: [email protected].