Click Journey: privacy.

The short version

Click Journey records the redirects a tab follows and shows them to you. Everything it reads stays in your browser. It makes no network request of its own, has no account, no analytics and no server, and nothing it reads is sent to Performify or to anyone else.

Who is responsible

Performify Limited, a company registered in England & Wales, company number 12000193. Contact: hello@performify.co.uk. Postal address is available on request.

Because nothing the extension reads ever reaches Performify, I do not hold any data about you or your browsing as a result of you using it.

What the extension reads

It needs access to all websites, because a redirect chain can cross any number of domains and the extension has to see each one. Chrome describes that permission as "Read and change all your data on all websites". The extension reads; it does not change the content of any page. This is what it reads:

• Page loads in each tab. For every page you load, and every redirect on the way to it: the URL, the request method, the status code, the response headers, the timing and the IP address of the server that answered. Only the page itself is recorded, not its images, scripts or other files. URLs are recorded whole, including their query strings.
• Cookie names in response headers. When a response sets a cookie, the cookie's name and attributes are kept and its value is discarded as the header is read.
• One request header, as true or false. The extension looks at the Sec-Fetch-User header on each page load and keeps a single true or false: whether a person started the navigation. No other request header is kept, and Chrome does not give the extension your Cookie, Referer or Authorization headers.
• Three kinds of tag from each page. A small script runs in the top frame of every page you open. It reads the page's canonical link, its robots meta tags and its meta refresh tags. It does not read the text of the page or anything you type into a form.
• The time of your first interaction with a page. The same script notes the moment of your first click, tap or key press on each page, so that a redirect can be told apart from a link you chose to follow. It records the time only: not what you clicked, not where, and not which key.
• Requests to known tag endpoints. The address and time of requests a page makes to a fixed list of advertising and analytics tag endpoints, such as a tag manager or an analytics collection address. Each address is cut to 2,000 characters and at most 80 are kept for a page. The body of the request is not read.
• A fixed list of attribution cookies, when you open the view. When you open the popup, the tab view or the side panel, the extension asks Chrome for the cookies set for the page you landed on. It keeps only those whose names are on a fixed list of advertising and analytics cookies (for example _gcl_aw, _fbc, _ga) and discards the rest at once. For the cookies that hold a click ID, it compares that ID with the one on the URL and shows whether they match, with the ID shortened. Other values are not shown.

Where it is kept, and for how long

• What is recorded for a tab is kept in Chrome's session storage for the extension (chrome.storage.session). That storage is held in memory and is not written to disk or synced to your Google account.
• A tab's record is removed when the tab closes. A tab keeps the chain for the page it is showing and for up to three recent pages, so that Back and Forward can show their chains, and for pages Chrome has preloaded for that tab until the tab moves on.
• Everything is cleared when the browser closes, and when the extension is reloaded, updated or switched off.
• Attribution cookies are read each time the view is opened and are not stored by the extension at all.

The extension has no other storage. It does not use local storage, sync storage, IndexedDB or cookies of its own.

What leaves your browser

Nothing, unless you take it out yourself. The extension contains no code that makes a network request, and Chrome is told, in the extension's content security policy, to refuse any connection from its pages. There is no analytics, no error reporting, no update check of its own and no third party.

Three features export what is on screen, and only when you press them:

• Copy puts the report on your clipboard as text and as formatted tables. It contains the URLs in the chain, the findings and the names of the tags and cookies found. It does not contain cookie values, with one exception: when an attribution cookie holds a different click ID from the one on the URL, the finding that says so quotes both IDs, shortened.
• PDF opens the report in a tab and starts Chrome's print dialog. Where the file is saved or sent is up to you.
• Copy on a hop puts that hop's URL on your clipboard.

What you do with a copied report or a PDF is outside the extension. Bear in mind that a URL can carry a token, such as a password reset link, and the report prints URLs whole.

What the extension can change

It never changes a page. Two buttons act on your tab, and only when you press them:

• Re-run and Re-run with test click IDs load the first URL of the chain again in the same tab, the second with labelled test values added to the URL. That is a visit to that URL made by your browser, as if you had followed the link again.
• Clear these and re-run deletes the attribution cookies listed on screen for that site, and no others, then loads the first URL again.

What you can do

• See it. Everything the extension has recorded for a tab is what its view shows you.
• Clear it. Close the tab, or close the browser. Switching the extension off and on at chrome://extensions clears everything it holds at once.
• Remove it. Removing the extension removes everything it has stored. Nothing remains anywhere else, because nothing was sent anywhere else.
• Limit it. In Chrome's settings for the extension you can restrict it to particular sites, or to run only when you click it. It then records only where you allow it.
• Incognito. The extension does not run in Incognito windows unless you switch that on.

Your rights

Under UK GDPR you have rights of access, correction, deletion, objection, restriction and portability over personal data an organisation holds about you. I hold none from this extension, so there is nothing for me to provide or delete: the data is on your device and under your control, as set out above. If you email me about the extension, that email is handled as the website's Privacy & Cookies policy describes.

Chrome Web Store user data policy

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In practice: what the extension reads is used only to show you the redirect chain and what happened to tracking along it, which is the extension's single purpose. It is not sold, not transferred to anyone, not used for advertising, not used to determine creditworthiness or for lending, and not read by any person other than you.

Complaints

If you're unhappy with how this is handled, you can complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

I'd appreciate the chance to address any issue directly first, but you're not required to contact me before escalating.

Changes to this policy

If a later version of the extension reads, keeps or sends anything differently, this page will be updated before that version is published, and the date at the top will change.

Contact

Privacy queries: hello@performify.co.uk
Company: Performify Limited, Company No. 12000193