Chrome Extension Privacy Policy

Expansions — Content Hub Extension · Last updated: 2026-06-01

The Expansions — Content Hub Extension adds quick, context-aware navigation to the Sitecore Content Hub tenant you are already working in. It runs entirely in your browser. It does not send your data to Expansions or to any third-party server.

What the extension accesses

  • The active tab's URL, when you click the extension icon — used to detect your Content Hub tenant origin (e.g. acme.sitecorecontenthub.cloud) so links point at the right tenant.
  • A small amount of tenant context. To show context-aware items (your current entity, its definition, and tenant status), the extension runs a script in the active Content Hub tab that calls that tenant's own API — /api/status, /api/userProfile, and /api/entities/{id} — using your existing Content Hub session. These requests go only to the Content Hub tenant you are already signed in to, over the same origin. No credentials or tokens are read, copied, or stored by the extension.

What the extension stores

The extension uses chrome.storage.local on your own machine to remember:

  • favorites_v1 — the navigation links you star, so they appear in your Favourites section.
  • cache_<tabId> — a short-lived cache of the tenant context described above, so the popup opens quickly without re-fetching on every click.

This data never leaves your browser. You can clear it at any time by removing the extension or clearing its site data.

What the extension does NOT do

  • It does not send any data to Expansions or to any third-party server.
  • It does not use analytics, tracking, advertising, or fingerprinting.
  • It does not sell or share personal data.
  • It does not read or store your Content Hub password, session cookies, or authentication tokens.

Permissions

  • activeTab — read the active tab's URL when you click the icon, to determine the tenant origin.
  • scripting — run a small read-only script in the active Content Hub tab to fetch the tenant context above from that tenant's own API.
  • storage — persist your favourites and the local context cache on your machine.

Contact

Questions about this policy: [email protected].