Effective 31 July 2026 · applies to the MurmStack browser extension, published by MurmTools.
MurmStack collects nothing, transmits nothing and stores nothing. It has no server to send data to, no account, no analytics, and no network code of any kind. This page explains exactly how that is true rather than asking you to take it on trust.
When you click the MurmStack icon on a page, it reads that page's own performance timeline and markup, and shows you one report: how many separate companies the page contacted, the millisecond each was first contacted, which of them are in the business of tracking people, and what the site is built with. The report is produced and displayed entirely on your machine.
| Permission | Why it exists |
|---|---|
activeTab |
Grants temporary access to the single tab you clicked the icon on, and only at that moment. It is used to read the page's existing resource timeline and a small set of page globals. The access ends with the tab. |
scripting |
Runs one read-only function, once, in that tab. The function is bundled in the extension. It does not modify the page, attach listeners, or persist after returning its result. |
There are no host permissions. MurmStack has no access to any website until you click its icon on that website. It cannot run in the background, and it never touches another tab.
It also does not request storage, webRequest,
tabs history, cookies, or any other permission. The full list in
the manifest is exactly two entries.
None. Not personally identifiable information, health, financial, authentication or location data; not personal communications; not web history, user activity or website content.
The Chrome Web Store defines collection as transferring data off your device.
MurmStack has no code path that sends anything anywhere. The extension contains
no fetch, no XMLHttpRequest, no WebSocket,
no sendBeacon, and no URL of any kind.
None. There is no storage permission, so the reading
exists only while the popup is open and is gone when you close it. Open the same
page twice and it is measured from scratch both times.
There are none. No analytics, no error reporting, no A/B testing, no advertising, no payment processor — MurmStack is free and has no paid tier.
Even the typefaces are bundled inside the extension rather than fetched from a font host. A tool whose purpose is to show you who a page contacts should not itself contact anyone.
The report names third-party companies a page contacted, using a list of domain-to-company mappings shipped inside the extension. That list is static and local; no lookup is performed over the network, and nothing about the sites you visit is sent anywhere in order to produce it.
MurmStack reports timing and presence. It does not tell you whether anything it found is lawful, and its report carries the reasons a finding may be perfectly fine.
MurmStack is a developer and analyst tool. It is not directed at children and collects no data from anyone, of any age.
If this policy ever changes, the effective date above changes with it. Since the extension collects nothing, any change would be a narrowing rather than a broadening — and if that ever stopped being true, it would be stated here before it shipped.
Questions about this policy: [email protected].