extunoPrivacy policy.
What Extuno collects, why, and the control you have over it. We process artifacts and findings, not your personal browsing.
Last updated 28 June 2026.
What we collect
Account data you provide (email and organization). Scan inputs you submit (extension or package identifiers, or files you upload for analysis). Operational data such as scan results, findings, and audit logs. Basic technical data (IP address and request metadata) needed to run the service securely.
Browser companion data (Chrome and Firefox)
The Extuno Browser Threat Protection extension behaves the same on Chrome and Firefox. It collects only what is needed to return a security verdict and to protect you: an anonymous device identifier that is not linked to your identity; the ids, names, and versions of the extensions installed in your browser, sent so a verdict can be returned for each; the store id of an extension you choose to deep scan; the URL or host of a page only when you report it or when a cryptominer or skimmer is detected on it; and, if you choose to connect an account, your Extuno account key. Your IP address is processed by our servers for rate limiting, abuse prevention, and a coarse country estimate. The extension never reads the files of your other extensions, never disables or removes them, and never uploads files from your device for a deep scan; the published package is fetched by its store id on our servers. Page content is inspected locally on your device for threat signals and is not transmitted. The companion does not collect your browsing history, and you can use every protection feature without an account.
What we do not do
We do not sell your data. We do not track your personal web browsing. The browser companion analyzes your installed extensions and the sites you visit on your device to protect you; it sends only the minimum needed for a verdict, never your page contents.
How we use it
To run scans and return findings, to operate and secure the platform, to bill paid usage, and to communicate about your account. Legal bases include performing our contract with you and our legitimate interest in securing the service.
Retention
Scan artifacts and findings are retained for as long as your account is active; enterprise plans can configure shorter retention. You can request deletion of your account and associated data at any time.
Sub-processors and storage
We use a small set of infrastructure providers to host and operate the service. Data is stored in our cloud environment; enterprise data residency options are available.
Your rights
Depending on your location, you may access, correct, export, or delete your data, and object to or restrict certain processing. Contact us to exercise these rights.
Cookies
We use only the cookies required to keep you signed in and to operate the application. The marketing site uses no third-party tracking or advertising cookies.
Questions? Use the contact page.
