Privacy
Last updated 13 September 2026
Ad Tray does not collect, transmit, sell, or share any personal information. There is no account, no server, and no analytics. Nothing reaches us from your copy of the extension.
What is stored, and where
All of this lives in chrome.storage.local on your own device:
- The pop-ups currently held in the tray, including their URL and hostname
- Your trusted-site list
- Any always-hold rules you create
- Whether the tray is visible or minimised
- A short local log of recent decisions, so you can see why something was held or allowed
Removing the extension deletes all of it. You can clear the trusted-site list at any time from the extension’s settings.
Network requests
The extension makes no outbound requests of its own. An optional reputation check against Google Safe Browsing exists but stays inactive unless you enter your own API key. With no key, nothing is sent and held pop-ups are simply labelled unknown.
Third-party pages in the tray
Held pop-ups render inside sandboxed frames. Those are real websites and may set cookies or collect data under their own policies, exactly as they would have if the pop-up had opened as a tab. We have no access to and no control over that. The sandbox does stop them opening further pop-ups, navigating the page you are on, or reaching their own origin’s cookies and storage.
Permissions
Ad Tray requests access to all sites because a pop-up can come from any site. The interceptor stays inert during normal browsing and acts only when a page tries to open a new window. It does not read page content, form fields, or credentials.
Changes
If this policy changes, the date above changes with it. If a future version ever sends data anywhere, that will be stated here plainly and asked for explicitly, not buried.