Privacy Summary

PixelGuard scans the HTML of messages you open in Thunderbird to flag tracking pixels, beacon links, and externally hosted images.

All detection happens locally; the extension never sends message content or metadata outside your device.

The add-on does not collect accounts, telemetry, or analytics. Settings such as whitelist entries and UI preferences are stored via browser.storage.local. They only sync if you explicitly enable Thunderbird Sync.

Data PixelGuard Processes
Input: The rendered HTML of the message you view plus sender metadata (author, domain) so detections can be shown in the banner and popup.
Storage: UI theme, debug toggle, whitelist domains, and detection counters are stored locally (browser.storage.local). No message bodies or detection artifacts are persisted after the tab closes.

Third Parties
PixelGuard does not contact any third-party service. It merely observes the URLs already embedded in the email; those remote resources are only loaded if you allow Thunderbird to fetch them.

Permissions Justification
messagesRead, messageDisplay: Needed to access the displayed message’s HTML and metadata for scanning.
tabs: Used to correlate detections with the active tab and display counts in the toolbar badge.
storage: Saves local settings (theme, whitelist, counters).

Optional webRequest permissions are not requested in this build since the add-on only detects, not blocks.

Contact
Email: hello@enriqueite.com
You can disable or remove PixelGuard anytime from Thunderbird’s Add-ons Manager.