Permissions explained
Sentinel browser extension. Last updated: 2026-11-13.
Sentinel asks for the permissions below and nothing more. None of them is used to collect data about you; see the Privacy policy.
Permissions
| Permission | Why |
|---|---|
storage, unlimitedStorage | Keep your settings and your saved-posts library on this device. The library can grow beyond the default quota. |
tabs | Find or open the tab of a social network for syncing; list tabs for the tab manager; know the current page for the side panel and downloader. |
scripting | Run the sync connector and page tools (translate selection, RedNote tools, colour picker) on pages where you use them. |
cookies | Use your existing logged-in session to read your own saved lists, and let you view, edit or clear cookies in the cookie manager. |
declarativeNetRequest | Redirect known phishing and crypto-miner domains, and sites on your own block list, to a warning page; set the Referer/Origin headers that media servers require for downloads. Three privacy options (all off by default) also use it: strip tracking parameters (such as utm_*, fbclid) from page addresses, send the Sec-GPC and DNT "do not track" headers, and block Facebook's Pixel script (fbevents.js). |
downloads, offscreen | Save media, ZIP files and exports (Markdown, CSV, JSON). The offscreen page fetches media with the right headers. |
alarms | Schedule periodic work: library auto-sync and the daily phishing list refresh. |
notifications | Tell you when a sync or download finishes, and show the update notice. |
contextMenus | Right-click shortcuts such as AI translate and summarize selection. |
sidePanel | Show the library and tools in Chrome's side panel. |
favicon | Show site icons from Chrome's local cache, so no external icon service sees the sites you visit. |
Site access
Sentinel can run on all http and https sites because protection (phishing detection, anti-clickjacking, miner and tracker blocking) must work wherever you browse. It also needs access to Instagram, Facebook, Threads, X, TikTok and RedNote / Xiaohongshu to sync your saved posts and show on-page buttons. Page content is processed locally and is not sent to us.
Optional permissions (asked only when you use the feature)
| Permission | Why |
|---|---|
topSites | Show your most visited sites on the Home page. |
tabGroups | Group and colour tabs (tab manager). |
No remote code
All code is bundled in the extension. Only data, the public phishing domain list, is downloaded.
Contact: dinvvan@gmail.com