Skip to content
serhiichuk.dev

llms.txt Extension Privacy Policy

Last updated: August 17, 2026

This page is about the llms.txt validator Chrome extension: what it does with data, not what serhiichuk.dev does with yours. For the site itself, see the main Privacy Policy.

What it can access

The extension's permissions are exactly activeTab, sidePanel, and scripting. Nothing else: no host permission, at install or at runtime, so it has no standing access to any site. It only ever sees the tab you clicked the toolbar button on, for that one click.

What it reads and fetches

Everything it fetches (the llms.txt file, robots.txt, the sibling llms-full.txt, the page's own response headers) is same-origin with the tab you're checking, and every one of those requests sets credentials: "omit". That means it never carries your session: a file that needs a login to view is not visible to it, even on a page you're signed in to. It's also why it can reach staging hosts and intranet addresses that a public checker like this site's own can't get to at all: it's making the request from inside your browser, not from a server outside it.

It also reads the current page's <link> elements to find the v2 discoverability relations (rel="describedby" and the markdown rel="alternate"). That's a read of what your browser already rendered on the page you're on, not a request of its own.

What it collects

Nothing. No telemetry, no counters, no analytics, no accounts. The extension does not use chrome.storage: an earlier build requested that permission, and it was dropped before release because nothing in the extension needs it. There is nothing saved between checks and nothing that would identify you.

The one thing that leaves your browser

Checking the links inside a file is deliberately left out, because that would need permission for every site those links point to. That check stays on serhiichuk.dev instead, and the panel links there when a file has links worth checking. Following that link is you choosing to visit this site, tagged with the usual campaign parameters so I know it came from the extension. That's ordinary navigation to a website with its own policy. See the main Privacy Policy for what happens once you're there. The extension itself never reports anything back on its own.

Contact

Questions about this policy? Email hello@serhiichuk.dev.