The Shoopfor extension

Nothing, when you install it. Chrome shows no site-access prompt, because the extension holds no site permissions until you switch a shop on yourself — one shop at a time, revocable at any time, from the extension's own popup.

• ✓No access to any website until you allow that shop yourself — the extension installs with none.
• ✓It cannot read your browsing history.
• ✓It cannot read your cookies or sign-in sessions.
• ✓It cannot watch your network traffic.
• ✓It cannot list or read your open tabs. When you click its icon it can see that one tab’s address, and nothing else.
• ✓It never sends the contents of a page — no page HTML ever leaves your browser.

When you tap the pill on a product page, these fields — and only these — are read from that page and sent to Shoopfor so we can find the same item elsewhere. Never the page's contents, never a page you did not tap on.

• brand
• canonical_url
• category
• currency
• detected_at
• gtin
• image_url
• merchant_sku
• mpn
• price
• product_name
• retailer

• A random install ID, made on your device when the extension is installed, goes with every request. It lets us stop abuse and keeps the off switch working. It is linked to your account only if you link the extension yourself.
• If you link the extension to your account, the browser’s name (taken from its user-agent text) labels it in your account, so you can recognise and unlink it.
• When you sync a shop’s cart, the items in it are sent: the cart page’s link, and each item’s title, price, quantity, link, product code (SKU), picture and size where the page shows one.
• When auto-apply runs at a checkout, the shop and the order total are sent to fetch codes that fit, and afterwards which codes worked and which failed, so other shoppers see codes that work.

The popup has a What we've sent section listing every request the extension has made — when, to which endpoint, on which shop, and the names of the fields that went with it. It is kept on your device, it is never uploaded to us, and you can clear it whenever you like.

That list records the shape of each request and not its contents: no product links, no titles, no prices. A log of the pages you had open would be the very thing this is meant to rule out.

Link the browser once with an eight-character code from Your Account → Browser Extension — the account panel, opened from the header — and a shop's cart can be synced to Your Carts when you press the button on that cart page. Unlink from either end at any time.