Infrasight extension privacy policy

Last updated: 2026-10-28. Publisher: BlueFrogAnalytics LLC, an Oregon limited liability company (bluefroganalytics.com). Contact: privacy@bluefroganalytics.com.

Short version

Infrasight tells you what each website you visit is built with. Detection runs automatically on every website you visit, on BlueFrog Analytics’ servers: when a page loads, the extension sends that site’s domain and a set of technical signals from the page to https://bluefroganalytics.com/api/tools/infrasight/detect (at most once per site per day), and shows you the answer. It never sends page text, form contents, cookie values, the address of the page you are on, or anything from private windows, and it attaches no account, user ID or install ID. The first time you open it, Infrasight asks you once, yes or no, whether to “Help map the web”. Unless you answer yes, BlueFrog uses the signals to answer you and then discards them.

When a site is checked

• Automatically, when a page on a public website finishes loading, at most once per site per 24 hours (the answer is cached in your browser). Local network, intranet and IP-address sites are never checked automatically, and nothing runs in private/incognito windows.
• When you click the Infrasight button on a page, if that site has no answer from the last 24 hours, or when you press “Check again”. A click checks the page you are on even if it is a local or intranet site.

What is sent for a checked site

• The site’s origin and domain name (e.g. https://example.com, example.com). Not the path, query or fragment of the page you are on.
• Selected response headers that reveal software (for example Server, X-Powered-By, Via, X-Generator, and platform headers such as X-Shopify-*), read by the extension with one request to the page’s own address; request-id headers are sent only as “present”. Set-Cookie and all other headers are never sent.
• Meta tags (name/property and content).
• The addresses of the page’s scripts, stylesheets, images and frames, with query strings and fragments removed.
• The names of cookies readable by the page (never their values).
• The names of JavaScript variables the page itself defines (never their values).
• The page’s <head> section (up to 64 KB), with form fields removed and query strings stripped from addresses, and the opening tags of script, link, iframe, image and meta elements (without event handlers, styles or values).
• Whether you answered yes to “Help map the web”, and the extension’s version number.

Never sent: the visible text of the page, anything you type, cookie values, your browsing history as a list, anything injected into the page by other extensions, anything from private/incognito windows.

Like any web request, the request reaches our server from your IP address. The server uses it in memory to rate-limit lookups and does not store it with the signals.

What BlueFrog does with it

• Unless you said yes to “Help map the web?” (including before you answer): the signals are processed to detect the technologies, the answer is returned to you, and the signals are discarded; they are never written to disk or logs. The answer for the domain (the technology names, nothing about you) may be cached on the server for up to 24 hours so the next lookup of the same site is fast. Our web server’s ordinary access logs (time, address of the endpoint, status, IP address) are kept for up to 30 days for abuse prevention and debugging; they do not contain the signals.
• If you answer “Yes, help map”: BlueFrog keeps the domain of each site checked, the technologies detected on it and, for signals our catalogue does not recognise yet, a reduced form without values (for example a script’s host and path, a header name, a cookie name, a meta tag name), to improve detection accuracy and its map of which technologies businesses use (bluefroganalytics.com and opsblu.com). It never keeps the address of the page you were on or anything that identifies you. The question is asked once, the first time you open the popup (or on the welcome page that opens after installation), with two equal buttons; you can change the answer any time under Privacy & settings in the popup, and from then on nothing is kept.

What your browser loads from our website

The popup shows a small logo next to each technology. Logos are images loaded from https://bluefroganalytics.com/tech-icons/ (for example wordpress.svg). They are plain image requests sent without a referrer; like any web request they carry your IP address and browser details, and they reveal which logo was shown, nothing else. If a logo fails to load, a letter tile is shown instead.

What is stored on your device

• The answers for each site you checked, for 24 hours (so the same site is not checked again), at most 2,000 sites.
• Your answer to “Help map the web?”.

Removing the extension deletes both.

Permissions

• Access to all websites (http://*/*, https://*/*): detection is the extension’s single purpose and runs automatically on every page you visit, as described above. You can withdraw it in your browser’s extension settings; Infrasight then only checks a page when you click its button.
• activeTab, scripting: read the page you are on when detection runs.
• storage: the cache and your answer above.

Links

The popup links to the BlueFrog Analytics report for the site and to OpsBlu data pages (with utm_source=extension and, for OpsBlu, the city your browser’s time zone suggests). Opening a link is an ordinary visit to those websites.

Sale and sharing

We do not sell data, and we do not use it for advertising, creditworthiness or lending. Data kept under “Help map the web” is aggregated by domain into BlueFrog and OpsBlu technology statistics. The use of information received from the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

When this policy changes, the new version is published at https://bluefroganalytics.com/privacy/infrasight-extension with a new date.

Contact

BlueFrogAnalytics LLC (Oregon), privacy@bluefroganalytics.com