Privacy & Security

Your privacy is our priority. Learn how FlowPick protects your data.

FlowPick is built with privacy as a core principle. Here's how we protect your data.

Zero Data Collection

FlowPick does NOT:

  • Collect any personal information
  • Track your browsing history
  • Send data to external servers
  • Use analytics or tracking scripts
  • Sell or share any data
You can verify this by reviewing our open source code or using browser developer tools to monitor network activity.

Local Processing

All operations happen locally in your browser:

OperationLocation
Media DetectionBrowser memory
Fragment MergingBrowser WebAssembly
File DownloadsYour computer
Settings StorageBrowser local storage

Permissions Explained

FlowPick requests minimal permissions:

activeTab

  • Purpose: Access current tab content
  • When Used: Only when you click the extension icon
  • Data: Never stored or transmitted

downloads

  • Purpose: Save files to your computer
  • When Used: When you initiate a download
  • Data: Files you choose to download

storage

  • Purpose: Save your preferences
  • When Used: When settings change
  • Data: Stored locally only

webRequest

  • Purpose: Monitor network for media
  • When Used: On pages where extension is active
  • Data: Never stored or transmitted

Data Storage

What gets stored locally:

  • Settings: Your preferences
  • Filter Presets: Saved filter configurations
  • Theme: Light/dark mode preference

You can clear this data anytime:

  1. Open FlowPick settings
  2. Click "Clear All Data"
  3. Confirm the action

Open Source

FlowPick is open source, meaning:

  • Code is publicly auditable
  • Security researchers can review
  • Community can contribute improvements
  • No hidden functionality

Best Practices

For maximum privacy:

  • Review permissions before installing
  • Check the source code if concerned
  • Use browser's incognito mode for sensitive sites
  • Regularly clear extension data if desired

Reporting Issues

If you discover a security issue:

  1. Do not disclose publicly
  2. Report via GitHub Security Advisory
  3. We will respond within 48 hours
  4. Credit given for valid reports