M MurmProof

Privacy policy

Effective 12 August 2026 · applies to the MurmProof browser extension, published by MurmTools.

MurmProof collects nothing, transmits nothing and stores nothing. It has no server to send data to, no account, no analytics, and no network code of any kind. This page explains exactly how that is true rather than asking you to take it on trust.

What the extension does

When you click the MurmProof icon on a page, it reads that page's own links and text, and shows you one report: how many commercial links are on it, how far down the page the first one appears, how many of them carry a sponsored or nofollow attribute, and where the affiliate disclosure sits relative to the first link — including its size and whether it is inside a collapsed toggle. The report is produced and displayed entirely on your machine.

Permissions

PermissionWhy it exists
activeTab Grants temporary access to the single tab you clicked the icon on, and only at that moment. It is used to read the links and visible text already on that page. The access ends with the tab.
scripting Runs one read-only function, once, in that tab. The function is bundled in the extension. It does not modify the page, attach listeners, or persist after returning its result.

There are no host permissions. MurmProof has no access to any website until you click its icon on that website. It cannot run in the background, and it never touches another tab.

It also does not request storage, webRequest, tabs history, cookies, or any other permission. The full list in the manifest is exactly two entries.

Data we collect

None. Not personally identifiable information, health, financial, authentication or location data; not personal communications; not web history, user activity or website content.

Collection means transferring data off your device. MurmProof has no code path that sends anything anywhere. The extension contains no fetch, no XMLHttpRequest, no WebSocket, no sendBeacon, and no remote URL of any kind.

Data we store

None. There is no storage permission, so the reading exists only while the popup is open and is gone when you close it. Open the same page twice and it is read from scratch both times.

Third parties

There are none. No analytics, no error reporting, no A/B testing, no advertising, no payment processor — MurmProof is free and has no paid tier.

Even the typefaces are bundled inside the extension rather than fetched from a font host. A tool whose purpose is to show you which commercial relationships a page has should not quietly have some of its own.

What MurmProof shows you about other companies

The report names affiliate networks, using a list of redirect hostnames shipped inside the extension. That list is static and local; no lookup is performed over the network, and nothing about the pages you visit is sent anywhere in order to produce it. A link whose network is not recognised is not counted rather than attributed to a guess.

MurmProof reports distances, sizes and counts. It does not tell you whether a page is compliant, deceptive or unlawful — those rules differ by country and by where a reader stops scrolling, and a distance in pixels is not a legal conclusion. It also refuses to estimate what a page earns, because commission rates are in a private dashboard and no page can show them.

Children

MurmProof is a publishing and research tool. It is not directed at children and collects no data from anyone, of any age.

Changes

If this policy ever changes, the effective date above changes with it. Since the extension collects nothing, any change would be a narrowing rather than a broadening — and if that ever stopped being true, it would be stated here before it shipped.

Contact

Questions about this policy: [email protected].