Privacy Policy
No data is collected. Nothing is sent to the developer or to any third party. There is no server behind this extension, no account and no analytics. The only network requests go to the Plex server address you enter, which is normally a machine on your own network.
What is stored, and where
| Plex server address | Local extension storage, on your computer |
| Plex token | Local extension storage, on your computer |
| Window preferences | Local extension storage, on your computer |
| The most recent result shown | Local extension storage, on your computer |
Nothing is stored anywhere else. Clearing the token on the options page removes it. Removing the extension removes all of it.
What is sent, and to whom
Requests go to one place: the Plex server address you entered, with your Plex
token attached as the X-Plex-Token parameter, exactly as the Plex
API requires. The default address is http://127.0.0.1:32400 — the
same computer.
There are two places in the extension that make a network request, and both build their URL from that stored address:
background.js plex() the library lookup options.js save handler the "Save and test" connection check
There is no analytics, telemetry, error reporting, remote configuration, third-party script, CDN or external endpoint of any kind.
Your Plex token
A Plex token is authentication data and is handled as such:
- stored locally, and never transmitted to anyone but your own server;
- never written into a web page or the page's DOM;
- never displayed back on the options page once saved — the field shows only that a token exists and how long it is;
- masked while being typed, with a temporary “show” toggle;
- cleared in one click.
It is not encrypted at rest. This is stated plainly rather than glossed over: any key capable of decrypting it would have to be stored beside it, which would protect nothing. The protection offered is that it never leaves your machine.
Permissions
| contextMenus | The right-click item, which is the whole interface. |
| storage | The settings listed above. |
| activeTab | Reads the text of the link you right-clicked, on that one tab, for that one invocation. |
| scripting | Runs one short function — written inline in the extension — in that page, to return the link's text. There is no persistent content script and no third-party code. |
| Website access | Optional. Requested at the moment you press “Save and test”, for the single address of your own server. Not requested at install, and never for all sites. |
Chrome's context menu passes a link's address but never its text, and on most
sites that address is an opaque ID — /dp/B0123XYZ,
/title/tt0084787 — which cannot be searched for. Reading the
link's own text is the only reliable way to know what you meant. That text is
used to build one search and is then discarded.
Remote code
None. No eval, no Function constructor, no imported scripts and
no CDN. Everything that runs is inside the package.
Children
The extension is not directed at children, and collects nothing from anyone.
Changes to this policy
If this policy changes, the date at the top of this page changes with it.
Contact
Questions about this policy can be sent through the extension's Chrome Web Store listing.