What VeroEats collects
Nothing. VeroEats has no accounts, no analytics, no tracking, and no servers of its own. We do not collect, store, transmit, or sell any personal data, browsing history, or shopping activity.

What happens on your device
Product analysis runs entirely in your browser. Ingredient lists and
nutrition data are read from the product page you are viewing and scored locally.
Your allergen preferences are stored in Chrome's extension storage
(synced by Chrome across your own browsers if you use Chrome sync). They never leave your Chrome profile otherwise.
Cached results are stored locally in extension storage and expire
automatically.
The one outside request VeroEats makes
When a product page doesn't provide complete nutrition or ingredient data, VeroEats asks Open Food Facts (world.openfoodfacts.org / us.openfoodfacts.org), a nonprofit open food database, for the product's label data. The request contains only the product's barcode and/or its name — never who you are, never your full browsing activity. Open Food Facts' privacy policy: https://world.openfoodfacts.org/privacy

That is the complete list of network destinations. VeroEats talks to the retail page you are already on, and to Open Food Facts. Nothing else.

Permissions, explained
Retail site access (amazon.com, walmart.com, target.com, …): required to
read the ingredient list and nutrition facts of the product page you're viewing, and to display the score panel on it.
Optional "any site" access: only granted when YOU click "Enable on this
site" for a store we don't cover by default. You can revoke it the same way.
Storage: saves your allergen selections and the local results cache.
Scripting / activeTab: used solely to run the analysis on stores you
explicitly enable from the popup.
Health information
VeroEats' scores, flags, and supplement notes are informational only and are not medical advice. VeroEats does not collect any health information about you — the allergen list you may configure stays in your Chrome storage.