Extension Privacy Policy
Last updated: July 20, 2026
The Short Version
The SocialKits browser extension captures social media session data so your Neuron instance can interact with platforms on your behalf. Data is sent only to the Neuron instance you configure — either a remote server over HTTPS or a local bridge on your machine. We do not share your data with third parties, run analytics, or serve ads.
What the Extension Collects
Session data (automatic)
- Session cookies — authentication cookies for supported platforms (Instagram, X, TikTok).
- HTTP headers — authorization headers and CSRF tokens required to make authenticated API calls on your behalf.
- API tokens — short-lived access tokens issued by the platforms during your active session.
- User identifiers — usernames and user IDs associated with your logged-in accounts.
Developer tools data (opt-in)
- Network requests — captured API calls to and from supported platforms when Developer Mode is enabled.
- WebSocket frames — real-time messaging frames when Developer Mode is enabled.
- Console logs — browser console output from supported platform pages when Developer Mode is enabled.
How Data Is Transmitted
- Remote Neuron instance — session data is sent over HTTPS to the API endpoint you configure in the extension settings.
- Local bridge — if you run the SocialKits bridge on your machine, data is sent to localhost only. No data leaves your device.
The extension never sends data to any endpoint other than the one you explicitly configure.
What the Extension Stores Locally
- Preferences — connection mode (API or bridge), Developer Mode state, and UI settings stored in
chrome.storage.local. - Connection settings — your configured API URL or bridge address.
- Cached session metadata — lightweight handle data (usernames, platform names) to display connection status without re-fetching.
When using the local bridge, credentials are encrypted at rest with AES-256-GCM and stored at ~/.socialkits/credentials.enc.
Third-Party Services
The extension sends data only to your configured Neuron instance. There are no analytics SDKs, ad networks, or third-party tracking services embedded in the extension. We do not sell, rent, or share your data with anyone.
Permissions and Why
- cookies — read session cookies from supported platforms so Neuron can authenticate on your behalf.
- tabs — detect when you are on a supported platform page to capture session data.
- activeTab — access the currently active tab to inject content scripts on supported platforms.
- storage — persist your preferences and connection settings locally.
- unlimitedStorage — store Developer Mode captures (network logs, WebSocket frames) without hitting browser quota limits.
- alarms — schedule periodic session refreshes to keep credentials current.
- Host permissions — scoped to supported platform domains and your configured Neuron instance URL. Required to read cookies and inject content scripts.
Developer Tools (Optional)
The extension includes a Developer Mode that enables a network inspector and automation rule builder. These features are opt-in and disabled by default.
- Captured network data and console logs are stored locally in your browser.
- Data is not sent anywhere unless you configure a webhook destination in the automation rules.
- Disabling Developer Mode stops all capture activity immediately.
Data Retention
- Session data — refreshed automatically each time you visit a supported platform. Old sessions are overwritten, not accumulated.
- Local storage — cleared automatically when you uninstall the extension.
- Server-side data — retention of data sent to your Neuron instance is governed by the main privacy policy.
Your Rights
Depending on where you are located, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Export your data in a portable format.
- Object to or restrict certain processing of your data.
To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe.
Changes to This Policy
We may update this policy from time to time. If we make significant changes, we will update the extension listing and revise the "last updated" date at the top of this page.
Contact Us
If you have questions about this policy or how the extension handles your data, reach out to us at [email protected].