This is a small, single-purpose tool, and its data handling is correspondingly small. Here's everything it does with data that touches you or your files.
There's no sign-up, no login, and no first- or third-party analytics or advertising script included by default. Nothing about your visit is profiled or sold.
When you upload a .crx or .zip file to decompile it or browse it in
the Code Viewer, that file is processed entirely inside your own browser. It is
never transmitted anywhere. Closing or refreshing the tab discards it completely — nothing is
stored server-side, and no copy persists after your session ends.
When you fetch an extension by ID or URL, your request passes through a small server-side function that relays it to the Chrome Web Store's own update servers and streams the result back to you. That function briefly sees:
The downloaded file passes straight through to your browser; it is not stored, inspected, or retained afterward.
To stop the service from being overwhelmed, IP addresses are counted against a short rolling window (currently 10 minutes) either in short-lived server memory or, if configured, in a Cloudflare KV counter with an automatic expiry. This data exists purely to cap request frequency and is never used for any other purpose.
If this deployment has Cloudflare Turnstile verification switched on, completing that challenge involves Cloudflare's own Turnstile service, which may process signals like your IP address and browser characteristics to determine you're not a bot. That processing is governed by Cloudflare's privacy policy, not this one.
Like virtually any website, requests to this site pass through Cloudflare's network, which may keep short-term operational logs (e.g. for abuse mitigation and reliability) under its own retention policies, independent of this application.
If this policy changes in a way that meaningfully affects how data is handled, the "Last updated" date above will change accordingly.