Skip to content
Supplement Checker
Browser extension reference

Supplement Checker: data and permissions

What the Supplement Checker browser extension does with data, which permissions it asks for, and why.

This page covers the Supplement Checker browser extension only. It is separate from the ShilNepal online store, which has its own policies (the store's privacy policy covers shilnepal.com).

In short: the Supplement Checker extension does not collect, store or send any data about you.

Applies to Supplement Checker version 1.1 and later. Last updated 5 October 2026.

How it works

When you click the extension's icon on a web page, it reads the text of that tab only, works out the results inside your browser, and shows them in its pop-up. Nothing is sent to ShilNepal, to a server or to any third party. When you close the pop-up, what it read is discarded.

What it handles

Information Collected? What happens to it
Text of the product page you open it on (title, price, ingredient and label text) No Read when you click the icon. Analysed in your browser. Discarded when the pop-up closes.
A screenshot of the visible tab, if you press Scan screen No Held in memory and turned into text on your device. Never saved, never uploaded.
An image you upload or paste No Same as a screenshot: processed on your device and discarded.
Personal information, accounts, email addresses No The extension has no accounts and asks for none.
Browsing history, other tabs, cookies No Not read. It only looks at the tab you opened it on.
Analytics, advertising or tracking identifiers No None. The extension has no analytics and shows no ads.
Anything stored on your computer No It does not use cookies, local storage or any other storage.

The extension makes no network requests of its own. It has no server.

Permissions and why they are needed

activeTab

Lets the extension read the page you are looking at, and take a screenshot of it if you press Scan screen. Chrome only grants this for the tab you opened the extension on, and only after you click its icon. It does not give access to all your websites.

scripting

Lets the extension run its page-reading step inside that one tab when you open it.

Security setting for label scanning

The extension's security policy includes wasm-unsafe-eval. This is the minimum setting WebAssembly needs, and the label-scanning engine uses WebAssembly. It does not allow remote code. All code ships inside the extension.

The extension asks for no host permissions, no "read and change all your data on all websites", and no access to your browsing history.

Software it includes

Label scanning uses Tesseract.js and its English language data, bundled inside the extension and released under the Apache 2.0 licence. It runs entirely on your device and contacts no online service. Ingredient notes, upper levels and exchange rates are built in, so they are not downloaded.

The pop-up has links to ShilNepal's website and to public sources such as the NIH fact sheets. They open only when you click them. Links to shilnepal.com carry a short source tag so ShilNepal can tell a visit came from the extension. Visiting a website is covered by that website's own policy.

General information only

Supplement Checker reads text from a page or an image, so it can misread. Its notes are general information, not medical advice. Check the product label, and speak to a health professional about what suits you.

Changes to this page

If the extension's behaviour changes, this page will be updated and the date above changed before the new version is released.

Contact

ShilNepal, Archerfield, Queensland, Australia. Email info@shilnepal.com.

About this web page

This web page is hosted on shilnepal.com. Visiting it is covered by the store's privacy policy, not by this page, which describes the browser extension only.