WAF Detector — Privacy Policy

Effective date: November 12, 2026

WAF Detector is a browser extension that identifies the web application firewall (WAF), CDN or edge service in front of the website you are viewing. This policy explains what the extension does with data. In short: it does not collect, store, sell or share any personal data.

What the extension accesses

• The address (URL) of the current tab, only when you open the extension popup. It is used to know which website to check.
• The HTTP response headers of that website. When you run a check, the extension sends one request (HEAD, or GET if the site does not support HEAD) directly from your browser to that website, then compares the response headers against a built-in list of known WAF/CDN signatures.

What the extension does not do

• It does not send any data to the developer or to any third-party server. The only network request goes to the website you chose to check.
• It does not send your cookies or login credentials with that request.
• It does not keep a history of the sites you check. Results are shown in the popup and discarded when the popup closes.
• It does not read page content, form data, passwords, or your browsing history.
• It does not use analytics, tracking, or advertising.

Permissions

• activeTab: lets the extension read the current tab's URL when you click its icon.
• Optional site access: the extension asks for access to a website only when you click Allow & check for that site. Chrome remembers this permission for that site only. You can remove it at any time from the extension's details page in chrome://extensions.

Changes to this policy

If this policy changes, the updated version will be published at this address with a new effective date.

Contact

Questions about this policy or the extension: please open an issue at github.com/zildjiean/WhatWAF/issues. The source code is available at github.com/zildjiean/WhatWAF.