# Grax Privacy Policy

Effective date: July 27, 2026

Grax is a browser extension whose single purpose is to block ads, trackers, pop-unders, forced redirects, and related hostile advertising behavior while preserving ordinary website functionality.

## Data handling

Grax does not sell user data, use user data for advertising, or transmit browsing history to the developer or third parties. Protection decisions are performed locally in Chrome using Manifest V3 APIs and bundled extension resources.

The extension may process the current page hostname, request metadata, and page structure locally when necessary to provide blocking, site controls, compatibility profiles, cosmetic cleanup, temporary element hiding, and diagnostics. Request URLs and page contents are not stored in the diagnostic activity log.

## Data stored on the device

Grax stores only the information needed for its user-facing features:

- Protection settings and enabled filter layers.
- Trusted website hostnames explicitly added by the user.
- Custom blocked hostnames explicitly added by the user.
- Short-lived tab pauses and bounded session diagnostics.
- Local metadata about recent matched rules, without request URLs.

A broken-site report is created only when the user requests it. The report is downloaded locally and is not transmitted automatically. It excludes page paths, query strings, page text, form values, passwords, identity documents, and browsing history.

## Permissions

- **activeTab:** applies user-requested controls and diagnostics to the current tab.
- **alarms:** expires temporary pauses and performs optional update-awareness checks.
- **declarativeNetRequestWithHostAccess:** blocks or redirects known advertising, tracking, and hostile network requests through Chrome's native engine.
- **storage:** saves settings, trusted sites, custom blocks, and local diagnostic state.
- **scripting:** registers the bundled protection runtimes at document start and removes them when protection is paused.
- **Host access to all websites:** allows the adblocker to provide its single blocking purpose on the websites the user visits.

## Data sharing and remote code

Grax does not share user data with advertisers, data brokers, analytics providers, or other third parties. It does not execute remotely hosted code. All executable code is included in the installed extension package.

Optional update-awareness checks contact the official EasyList and EasyPrivacy source endpoints to compare source metadata. These checks do not upload browsing history or page content, and they do not install executable code or unvalidated filter rules. New bundled filters arrive only through a signed extension release.

## Retention and deletion

Persistent settings remain on the device until the user changes them, resets the configuration, or uninstalls the extension. Session diagnostics and temporary tab state are bounded and expire automatically. Uninstalling Grax removes extension-managed local data through Chrome.

## Security and Limited Use

Grax limits access to extension storage to trusted extension contexts and uses local, bounded diagnostics. The use of information received from Chrome and Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

## Changes

If this policy changes, the effective date and published policy will be updated before behavior that requires a new disclosure is released.

## Support

Support information and the current privacy policy are available from the official Grax website at `grax.pages.dev`.
