GetBlocked! is a privacy-focused browser extension. Security and privacy reports are welcome.

Please report security or privacy issues privately when possible. If GitHub Security Advisories are enabled for the repository, use that flow. Otherwise, contact the maintainer privately or open a minimal public issue that does not include sensitive exploit details.

Helpful report details include:

• A clear description of the issue.
• Steps to reproduce.
• Affected files or extension behavior.
• Whether browsing data, local storage, permissions, or rule behavior are involved.
• Suggested fixes, if you have them.

GetBlocked! should remain local-only.

• Browsing data should never be uploaded.
• External analytics should not be added.
• Telemetry should not be added.
• Remote logging should not be added.
• Remote scripts, fonts, or assets should not be added.

Permission expansion is security-sensitive. Any PR that changes manifest.json permissions should explain:

• Why the permission is required.
• Why a narrower permission is not enough.
• How the permission affects user privacy.
• How the change was tested.

Do not add powerful or debug-only permissions unless there is a clear, reviewed, production-safe reason.