WhoGetsMyData counts the companies a website connects to in your browser. By default the add-on sends nothing to us. It only opens a report on whogetsmydata.com when you click the button to do so.

Helping the public database is optional and off by default. Only if you turn it on (and allow Firefox to share browsing activity), the add-on sends us, for the websites you visit: the domain of the website (for example example.com), the known services and the other third-party domains the website contacted, the version of the add-on and the kind of browser.

It never sends an identifier, addresses of pages, search terms, page content, form input, cookies or the time of a visit, and it does not run in private windows. Each website is sent at most once a day, at least ten minutes after the visit, together with at most a few other websites picked at random.

We store only counters per website: how often and on how many days it was reported, and which services and third-party domains were seen there, never who reported it. Requests are rate limited with a daily changing hash and are not written to our API log; like every web server, our hosting provider keeps standard access logs for security and troubleshooting. Websites reported this way are checked by our scanner and their reports are published like any other scan.

The legal basis is your consent. You can withdraw it at any time by turning helping off in the add-on menu; websites that were waiting are then deleted in your browser. Since reports contain nothing that identifies you, we cannot find or delete reports you sent earlier; they are kept as counters of the website.

Full privacy policy: https://whogetsmydata.com/privacy
Contact: privacy@whogetsmydata.com