Carrier Pigeon collects no personal data whatsoever. It does not track your browsing, store your history, or communicate with any external server. Everything happens locally inside your browser.
When you navigate to a URL that contains UTM tracking parameters (e.g. utm_source, utm_medium, utm_campaign), the extension replaces those parameters with randomly selected humorous alternatives, entirely within the browser, before the request is sent. No data from your URL or browsing session ever leaves your device through this extension.
None. The extension does not collect, store, transmit, or share any of the following:
declarativeNetRequest, Required to intercept and rewrite URL parameters before the request is sent to the server. This is a read/write permission scoped to URL transformation only; no request content or response data is accessed.storage - Required to remember whether the extension is on and which parameters you pinned. This is local to your browser: it is never read by anything else and never leaves the device.alarms - Required to re-roll the random values on a timer, once a minute, so consecutive visits do not carry the same attribution. This is a clock and nothing else: it carries no information about what is being browsed. It replaced webNavigation in 1.1.0, which did the same timing and came with the URL of every navigation in the browser attached.*://*/*), UTM parameters can appear on any website, so the extension must be active across all URLs to function. No website content is read or stored.No data is shared with any third party. The extension makes no network requests of its own.
If this policy changes in a future version, the updated date above will reflect that. Significant changes will be noted in the extension's release notes.
Questions or concerns? Please open an issue on the project's GitHub repository.