Effective 25 October 2026
This extension does not collect, store on any server, sell, or share any personal or usage data.
When you open a repository code, tree, or file page, a pull request's Files changed tab, a commit, or a compare page on github.com, the extension reads the code on that page and checks it against a list of known malware patterns that ships inside the extension. All checks run locally in your browser.
The extension only makes requests to github.com and raw.githubusercontent.com, to download the diff and the files of the repository or change you are viewing. These requests use your existing GitHub session in the browser, exactly as if you opened the files yourself, so private repositories you already have access to work too. The content is checked in memory and is not sent anywhere else.
There are no analytics, tracking, advertising, crash reporting, or remote code.
Your settings (scanning on or off, full-file checks, disabled rules) are saved with Chrome's storage, which may sync them between your own signed-in Chrome browsers. The result of the most recent scan (page URL, file names and rule IDs) is kept locally so the popup can show it. Removing the extension deletes this data.
Changes to this policy will be published on this page. Questions: open an issue at github.com/SahinurDEV/pr-malware-guard/issues.