Privacy Policy

VirusTotal Domain Monitor is a browser extension for webmasters that checks domain reputation via the VirusTotal public API. It runs locally in your browser and does not collect, transmit, or store any personal data on external servers.

Last updated: March 2026

What data does the extension store?

VirusTotal API key (synced)

Your API key is stored in chrome.storage.sync and syncs between your devices through your browser account. The key is only sent to the official VirusTotal API (www.virustotal.com) and nowhere else.

Domain watchlist (local)

Your monitored domains and their check results are stored in chrome.storage.local. This data stays on your device and is not synced or transmitted.

Settings (synced)

Check interval, theme preference, rescan policy, and pause state are stored in chrome.storage.sync. This data syncs between your devices through your browser account.

API usage counter (local)

A daily request counter is stored locally to respect VirusTotal rate limits. No usage data is sent externally.

Network requests

The extension makes only one type of external request:

What this extension does NOT do

Permissions explained

Permission Why it's needed
storageSave API key, watchlist, settings
alarmsSchedule background domain checks
tabsRead active tab URL for badge display
activeTabAccess current tab info for domain detection
sidePanelOpen the monitoring panel (Chrome/Edge)
notificationsNotify when batch checks complete
host_permissions: virustotal.comAPI calls to VirusTotal only

Third-party services

Open source

VirusTotal Domain Monitor is open source. You can review the complete source code at github.com/investblog/virustotal.

Changes to this policy

If this privacy policy changes, the updated version will be published on this page.

Contact

For questions or concerns about privacy, open an issue on GitHub or reach out via Telegram.