Privacy policy

retire.js does not collect, store on any server or sell personal data, and it has no analytics.

What stays on your device

• The list of scripts and libraries found on each tab. It is kept in memory and in the browser's session storage, and is deleted when the tab closes or the page changes.
• The settings, the downloaded Retire.js database and the OSV.dev answer cache. They are kept in the add-on's local storage and removed when you uninstall the add-on.

Network requests the add-on makes

1. Scripts of the page you are visiting. The add-on reads them again (normally from the browser cache) to scan them. They go to the same servers your browser already contacted.

2. Retire.js database. Once a day it downloads `jsrepository-v6.json` from `raw.githubusercontent.com` (GitHub). No data about you or your browsing is sent. You can turn this off in the panel ("Daily database update").

3. OSV.dev, only if you turn it on. It sends `api.osv.dev` (Google) the name and version of the libraries found, for example `lodash 4.17.15`.

• It never sends page addresses, cookies or identifiers.
• Firefox asks for your consent (data collection: website content), and you can withdraw it at any time in the panel or in *Add-ons and themes → retire.js → Permissions*.
• OSV.dev's privacy policy: https://policies.google.com/privacy

Contact

Francesco De Stefano — https://retirejs.sourceforge.io/