DPDP Scanner — Privacy Policy

Last updated: 30 June 2026

DPDP Scanner is a Chrome extension that checks the website you are viewing for surface-level red flags under India's Digital Personal Data Protection Act 2023 and the DPDP Rules 2025. This policy explains what the extension does and does not do with data.

The short version

The extension's standard checks run entirely inside your browser. DPDP Scanner does not collect, store on our servers, sell, or share your personal information or your browsing activity. There is no analytics, no telemetry, and no tracking.

What the extension accesses, and why

When you click the extension on a site you want to scan, it reads the content of that page and of that site's published privacy policy in order to run its checks. To detect trackers that fire before consent, it observes (but never blocks or alters) the network requests the page makes. All of this processing happens locally in your browser and the results are shown only to you.

What we store

The only data the extension saves is your own settings, stored locally in your browser using Chrome's storage: whether you have enabled the optional deep-read feature, and the backend endpoint URL you choose to configure. These never leave your browser except as described under "Optional deep-read" below.

What we do NOT collect

We do not collect or transmit your browsing history, the pages you visit, your personal data, your identity, your location, your keystrokes or clicks, or any analytics about how you use the extension.

Optional deep-read (off by default)

DPDP Scanner includes an optional, paid "deep-read" feature that reads the prose of a site's privacy policy more closely. This feature is OFF by default. If you choose to enable it, you must supply the URL of a backend that you control. When enabled, the extension sends only the text of the scanned site's published privacy policy to that endpoint so it can be analysed; it does not send any of your personal data. If you never enable it, this feature is never used.

Third parties

The standard checks do not share data with any third party. If you enable the optional deep-read, the only recipient is the backend endpoint you configured yourself; we do not operate it on your behalf or receive that data.

Children

The extension is a tool for website operators and reviewers and is not directed at children.

Changes

If this policy changes, the "Last updated" date above will change. Material changes will be reflected in the extension's store listing.

Contact

Questions about this policy: vis.suri90@gmail.com