Google Analytics (GA4) Name Changer for Chrome Extension Developers

What data does this extension access?

Google Analytics (GA4) Name Changer for Chrome Extension Developers reads the text content of the Google Analytics interface (analytics.google.com) to locate and replace property slugs with your custom names. This processing happens entirely within your browser — no data is extracted or sent anywhere.

What data does this extension store?

The only data stored is the slug-to-name mapping you create in the Settings page. This is stored using Chrome's built-in chrome.storage.sync API, which means:

• Your mappings are saved locally in your Chrome browser profile.
• If you are signed into Chrome, Google may sync this data to your other devices through your Google account, subject to Google's own privacy policy.
• This extension never reads, copies, or transmits your mappings to any server operated by this extension's developer.

A small amount of operational state is also kept in chrome.storage.local, which is never synced and never leaves the device: your preferences, the last Google Analytics context seen so the toolbar popup still works on other tabs, a short-lived handoff of rows between the toolbar popup and the settings page, extension names the extension read from the Google Analytics reports already on your screen, which Google Analytics account each property sits under and Google's own numeric ID for each one, so the settings page can group them and can open a property you have never visited, and the address of the Google Analytics page you last had open, which is kept only so that the extension opens the same Google account you were already signed in as. Uninstalling the extension deletes all of it.

Does this extension send any data to external servers?

Only when you submit the feedback form, and only what you typed into it.

Everything the extension actually does — replacing identifiers, working out names, storing your mappings — happens entirely inside your browser and makes no network request of any kind. That is true in every configuration, including with the optional auto-naming feature switched on. There is no analytics, no telemetry, no tracking and no background communication of any sort. Your property slugs, account numbers, display names, traffic figures, revenue and user counts are never transmitted anywhere, ever.

The single exception is the feedback form on the settings page, described in the next section. It sends only when you fill it in and press the button.

The feedback form

The settings page has a feedback form for reporting a problem. It is entirely optional. If you never use it, the extension never makes a network request.

When you press the send button, the following is posted to a relay operated by this extension's developer at ga4nc-feedback.sunmooncal.workers.dev, which forwards it to the developer by email through Resend, an email delivery provider:

• The name you typed, if you chose to give one. It is optional.
• The email address you typed, so a reply can reach you. This is required, because a report nobody can answer helps nobody.
• The message you wrote.
• The installation details shown to you on that same page, before you send. These are your extension version and ID, your browser user agent, language and platform, whether auto-naming and the optional permission are on, and counts of how many names you have. They deliberately contain no property slugs, no display names, no account numbers and no URLs. You can read the exact block on the page.

That data is used to answer you and to reproduce the problem. It is not sold, not shared with anyone else, and not used for advertising, profiling or any purpose other than replying to your report. The relay stores nothing: it validates the request, passes it to the email provider and forgets it.

If the relay cannot be reached, the form falls back to opening a pre-filled message in your own email client, and nothing is transmitted by the extension at all. You can also simply open a GitHub issue instead and never use the form.

The optional auto-naming feature

A Chrome Web Store property slug in Google Analytics is the same string as your extension's Chrome Web Store ID. If you turn on auto-naming, the extension uses that ID to ask Chrome for the name of the matching extension installed in your browser, and suggests it as the display name, so you do not have to identify each 32-character ID by hand.

Separately, and with no permission or setting required, the extension reads extension names out of the Google Analytics reports already displayed on your screen. Your Chrome Web Store listing pages appear in those reports titled "<Extension Name> - Chrome Web Store", so the name is already on the page. This is ordinary reading of the page you are looking at, the same thing the extension does to replace text, and it involves no request to anyone.

This feature is off by default. Turning it on requires you to grant Chrome's management permission, which Chrome will prompt you for. Until you do, the feature cannot run.

What it does and does not do:

• Names are read locally, from your own browser. Nothing is transmitted anywhere, and no network request is made.
• The extension calls exactly one method, chrome.management.get(), and reads exactly one field from the result: the extension's name.
• It never installs, enables, disables, or uninstalls anything, and never enumerates your full extension list.
• Turning the feature off revokes the permission, so the capability is removed rather than just switched off.
• An extension that is not installed in your current Chrome profile cannot be named this way. Those rows show a link that opens the extension's public Chrome Web Store listing in a new tab, which you can read and type from. That is an ordinary page visit you choose to make, not a background request.

Permissions used

• storage — to save your slug-to-name mappings and settings.
• scripting — so that a Google Analytics tab you already had open when you installed or updated the extension starts working without you having to refresh it. It can only ever reach analytics.google.com, because that is the only site this extension has permission for.
• Host permission for analytics.google.com — to inject the content script that performs text replacement on the GA4 interface.
• Optional permission: management — requested only if you turn on auto-naming, and only to read the names of extensions already installed in your browser. Not granted at install time. Revoked when you turn the feature off.

No other permissions are requested. In particular, the extension does not request the tabs permission, so it cannot read your browsing history and cannot see the address of a tab on any other site. It can see the address of a Google Analytics tab, because that is the one site it has permission for, and it uses that only to stay on the Google account you are already signed in as.

When you press Visit and name the rest, the extension opens one Google Analytics tab in the background, walks it through the properties it could not name, and closes it when it is done. It opens no other page, and it does this only when you ask it to.

The feedback form needs no permission at all. The relay replies with the CORS header that permits this extension's own origin, so the request is allowed without a host permission being added to the extension.

Contact

If you have questions about this privacy policy, please open an issue on GitHub or email support@palworks.ai.