Chrome extension privacy policy
Last updated: 24 October 2026
The SimpleVerifier: Email Finder & Verifier extension reads a page only when you click Find on this page, checks what it finds in your browser, and sends only the email addresses you choose to live-check to simpleverifier.com. It looks up the open site's mail records through Cloudflare's public DNS, and sends anonymous usage counts to PostHog, which you can switch off. It has no ads and loads no remote code.
Single purpose
Find email addresses and phone numbers on the page you're viewing and check them: free in-browser checks and the site's mail setup without an account, and live mailbox checks with a SimpleVerifier account or API key.
What the extension handles
| Data | Where it is kept | Where it is sent |
|---|---|---|
| Text and links of the page you scan | Read once, in your browser, when you click Find on this page. Discarded when the popup closes. | Nowhere. The in-browser checks (syntax, typos, disposable and role addresses, phone formats) run on your computer. |
| Text you select and right-click | Only when you choose Verify with SimpleVerifier: the first email address in the selection waits in Chrome's session storage until the popup opens, then is deleted. | Checked in your browser like a typed address. It goes to simpleverifier.com only if you run a live check on it. |
| The domain of the tab you have open | Not stored. | To Cloudflare's public DNS when you open the popup, to look up that domain's MX, SPF and DMARC records. |
| Addresses you live-check | Held in the popup while it is open. Not saved by the extension. | To simpleverifier.com, with your sign-in cookie or API key, to be checked, and handled like any other check on the site. The domain of an address you check one at a time also goes to Cloudflare's public DNS. |
| Your simpleverifier.com sign-in | In your browser's normal cookie for simpleverifier.com, set when you sign in with Google on the site. The extension stores no password or token. | Only to simpleverifier.com, with the extension's requests to it. |
| Your API key, if you paste one | In chrome.storage.local on your computer, after simpleverifier.com confirms it works. Remove key in the popup deletes it. | Only to simpleverifier.com, in the Authorization header of the extension's API requests. Live checks then count as API calls on your plan. |
| Anonymous usage events | A random install id in chrome.storage.local, not linked to your account or email. | To PostHog, unless you untick Anonymous usage stats. Event names and counts only, listed below. |
| Settings | Your default phone country, a use count and whether you dismissed the rating line, in chrome.storage.local. | Nowhere. |
The extension does not collect your browsing history, the addresses of pages you visit, what you type elsewhere, your location or anything about your device. Usage events never contain an email address, a phone number, a page address or a domain.
Permissions
- activeTab
- Lets the extension see the tab you're on only while you have its popup open: the tab's address, so it can look up that site's mail records, and its contents after you click “Find emails and phone numbers on this page”. No access to your other tabs.
- contextMenus
- Adds “Verify with SimpleVerifier” to the right-click menu when you select text. Chrome hands the extension only the text you selected, and only when you click that item; the page itself is not read.
- scripting
- Runs a one-off function in that tab, on the same click, that returns the page's text and its mailto: and tel: links. It doesn't change the page.
- storage
- Saves your default phone country, a random install id, a count of how many times you've used it, whether you've dismissed the rating line, whether usage stats are on and, if you paste one, your SimpleVerifier API key, in Chrome's local extension storage. Not synced to your Google account. An address you pick from the right-click menu waits in session storage until the popup opens, then is deleted.
- simpleverifier.com
- The only site the extension holds a permission for. It asks simpleverifier.com whether you're signed in and how many free live checks you have left, and sends the addresses you choose to live-check. It uses your existing simpleverifier.com sign-in, or the API key you pasted into the popup, and never stores a password.
Other services it calls
- Cloudflare DNS (cloudflare-dns.com)
- Public DNS-over-HTTPS lookups for the MX, SPF and DMARC records of the site you have open, and of an email's domain when you check one address. Cloudflare receives the domain name being looked up and your IP address, under its 1.1.1.1 privacy policy.
- PostHog (us.i.posthog.com)
- Anonymous usage events, unless you untick “Anonymous usage stats” in the popup. Like any web request it receives your IP address; the events ask it not to derive a location. See the list below.
Usage events
Each event carries the random install id, the extension version and only the details below. We ask PostHog not to look up a location from your IP address and not to build a person profile. Untick Anonymous usage stats in the popup footer and nothing more is sent.
- extension_install
- Once, when the extension is installed.
- extension_finder_run
- When you click Find on a page: how many emails and phone numbers were found (counts only).
- extension_live_check
- When a live mailbox check finishes: the verdict (valid, risky or invalid), free or paid account, and whether it was part of Verify all.
- extension_limit_reached
- When this month's free live checks run out: how many emails were left unchecked.
- extension_upgrade_clicked
- When you click a Pro or full list report button: which button.
- extension_rating_prompt_shown
- The first time the “Enjoying it? Rate us” line appears.
- extension_rating_prompt_clicked
- When you click that line.
Sharing and limited use
We do not sell the data the extension handles, share it with third parties, or use it for advertising, creditworthiness or any purpose other than checking the addresses and numbers you ask it to check and understanding, in aggregate, how the extension is used. Its use of data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Checks sent to the API are processed and kept as described in the SimpleVerifier privacy policy.
Removing your data
Uninstall the extension and Chrome deletes its local storage, including the install id. Signing out of simpleverifier.com signs the extension out too; Remove key in the popup deletes a saved API key, and you can revoke the key itself on the API keys page. Questions: [email protected].