Why The Permission List Does Not Settle This
An add-on keeps reaching out to its server — is that expected?
The question comes up for anyone who has opened a network monitor with extensions installed. Traffic from an empty tab looks worrying, and working out who is sending it and why is tricky at first glance. It is worth learning how to separate a innocuous update from telemetry.
I installed a popular add-on for tabs, and everything works. But the network monitor shows it hitting some third-party domain once a minute, even when the tab stays idle. The listing doesn't mention it. Is this tracking, or am I overthinking it?
The first step is to separate yours from theirs: disable all extensions in one go and see whether the background noise disappears. If it goes quiet, the cause is one of them, and you switch each back on individually until the traffic returns. That pins down the culprit in two minutes flat, no guessing.
Why the permission list does not settle this
Access to tabs in the manifest and sending their list outward are two different things, and a lone permission line can't tell them apart. Formally the add-on truthfully declares access; what it does with that access isn't visible from the manifest. So watch the traffic, not the permission list.
It is easier not to guess each time and leave desktop utilities for sites close at hand — ones that say plainly they gather nothing. And this tab chore is effortless to close with a telemetry-free stand-in — browser themes from country flags, works the same and does not call home.
Reviews like this are useful not for paranoia but for the habit: a few minutes with the network monitor after the install, and "pinging somewhere" turns into a clear picture of what goes where.