Privacy

Nonius ekstenzija

Nonius ekstenzija je bočni panel za Chrome kojim Nonius Media proverava tagove, piksele i oglasni stack na sajtovima klijenata, pravi UTM linkove i testira kampanjske linkove. Ukratko: ekstenzija ne šalje ono što snimi i ništa ne čuva posle zatvaranja browsera, osim onoga što je ovde navedeno. Sama šalje samo zahteve opisane u odeljku o tome kome se podaci šalju (Iter API i, na klik, javni ads.txt i sellers.json).

English version below

Šta ekstenzija čita

• Mrežne zahteve u tabu u kome je snimanje uključeno. Kad korisnik u panelu klikne Snimi, ili pokrene Test linka koji otvara novi tab i snima samo njega, ekstenzija posmatra zahteve koje ta stranica šalje (adresa, metod, telo zahteva) da bi prepoznala tagove i piksele (na primer Google Analytics, Meta Pixel) i zahteve za oglase. U ostalim tabovima ne čita ništa. Zahtevi se ne blokiraju i ne menjaju.
• Stanje stranice u tom tabu: sadržaj dataLayer-a (poslednjih 50 unosa), Consent Mode signale, koji je banner za kolačiće (CMP) prisutan, imena kolačića prvog domena bez vrednosti, spisak skripti sa veličinom i vreme učitavanja. Kolačići bannera za kolačiće same stranice se pretvaraju u stanje pristanka, a njihove vrednosti se odbacuju.
• Oglasni stack stranice u tom tabu (panel Publisher): stanje Google Publisher Tag-a (ad slotovi, veličine, targeting, šta je servirano, refresh, lazy load, pomeranje rasporeda po slotu), Prebid.js (verzija, podešavanja, bideri, aukcije i bidovi), odgovor CMP-a na __tcfapi, __uspapi i __gpp (uključujući TC string, koji se dekodira lokalno) i prisustvo Metior taga. Sve se čita u stranici samo dok je snimanje uključeno.
• Kolačiće pristanka snimanog sajta. Dok je snimanje uključeno, ekstenzija prati promene samo onih kolačića u kojima banner za kolačiće pamti izbor posetioca (na primer OptanonConsent, CookieConsent, cookieyes-consent, euconsent-v2, po tačnom imenu; svaka druga promena se odmah odbacuje), i to samo kolačića koje trenutna stranica snimanog taba zaista vidi (domen, putanja, secure) i samo iz skladišta kolačića tog taba (običan ili incognito prozor). Vrednost se odmah pretvara u stanje pristanka (pre izbora, prihvaćeno, odbijeno); sama vrednost kolačića se ne čuva, ne prikazuje i ne izvozi. Ostali kolačići se ne čitaju preko chrome.cookies, a kad nijedan tab ne snima, kolačići se ne prate.
• Adresu i naslov aktivnog taba, da bi se popunio UTM builder i znalo za koji tab je sesija.

Šta ekstenzija čuva

Snimljena sesija živi u memoriji ekstenzije i u chrome.storage.session, koji Chrome briše kad se browser zatvori. Sesija se briše i kad se zatvori tab ili kad korisnik klikne Zatvori sesiju. Lista kratkih linkova napravljenih u tekućoj sesiji browsera stoji u chrome.storage.session i nestaje sa zatvaranjem browsera.

Jedino što preživi zatvaranje browsera su podešavanja u chrome.storage.local: Iter adresa, Iter token i podrazumevani klijent za UTM konvenciju. Token se briše u podešavanjima ekstenzije (Settings) ili uklanjanjem ekstenzije.

Izvezi HTML pravi lokalni fajl koji korisnik sam snima na svoj računar. Ekstenzija ga nigde ne šalje.

Kome se podaci šalju

Nikome, osim Iter API-ja (servis Nonius Media za skraćivanje linkova, podrazumevano https://go.ndex.run), i to samo kad je korisnik sam uneo Iter token. Kad klikne Skrati, šalju se odredišni URL i naslov linka. Za čitanje UTM konvencija klijenata (GET /api/settings) šalje se samo token; to se dešava kad korisnik otvori tab Iter ili Settings (i posle čuvanja ili brisanja tokena) ili u tabu Settings klikne Proveri vezu, nikad samim otvaranjem panela.

Kad korisnik u panelu Publisher klikne Proveri ads.txt, ekstenzija preuzima javne fajlove ads.txt sajta na kome je trenutna stranica snimanog taba i sellers.json oglasnih partnera koji su se pojavili na tom sajtu u sesiji (bideri iz Prebida, SSP domeni iz zahteva, Google). To su obični GET zahtevi bez kolačića i bez ikakvih podataka o korisniku ili sesiji. Od sellers.json fajlova zadržavaju se samo unosi za tražene seller ID-jeve, u snimljenoj sesiji (memorija i chrome.storage.session, briše se sa zatvaranjem browsera) i u HTML izvozu ako ga korisnik napravi; ceo fajl se nikad ne čuva. Bez klika se ništa ne preuzima.

Nema analitike, telemetrije, reklama, prodaje ni deljenja podataka sa trećim stranama. Ekstenzija ne učitava udaljeni kod: sav kod je u paketu. Stranice koje korisnik otvori (uključujući one koje otvori Test linka) šalju svoje zahteve kao i inače; ekstenzija ih samo posmatra.

Dozvole i zašto su potrebne

sidePanel

Ceo interfejs je bočni panel koji ostaje otvoren dok se korisnik kreće kroz sajt.

storage

chrome.storage.session drži sesiju snimanja dok se pozadinski proces gasi i pali (briše se sa zatvaranjem browsera); chrome.storage.local drži Iter adresu, token i podrazumevanog klijenta.

tabs

Čitanje adrese i naslova tabova: aktivnog taba (UTM builder, vezivanje sesije za tab, prepoznavanje stranica koje se ne mogu snimati, kao chrome:// i Web Store, koje su van host dozvole), taba u kome korisnik klikne Snimi i taba Testa linka (krajnji landing). Snimani tab se ponovo učitava kad korisnik u Consent testu upiše izbor sa bannera.

webRequest

Posmatranje, bez blokiranja i menjanja, zahteva u tabu u kome je snimanje uključeno, sa telom zahteva, jer GA4, Meta i Prebid šalju podatke u telu; praćenje redirekcija i zahteva test taba (pikseli na landingu) u Testu linka. Osluškivači postoje samo dok neki tab snima ili test radi.

webNavigation

Prepoznavanje nove stranice u sesiji (uključujući SPA navigacije) i klijentskih redirekcija u Testu linka. Osluškivači ostaju registrovani samo da bi navigacija probudila ekstenziju dok tab snima; navigacija se obrađuje samo za tab koji snima ili dok test radi, a za ostale tabove se odmah ignoriše i ništa se ne čuva.

scripting

Jednokratno čitanje stanja stranice (dataLayer, Consent Mode, CMP, skripte, imena kolačića prvog domena bez vrednosti, kolačići bannera same stranice koji se pretvaraju u stanje pristanka pa odbacuju, googletag, pbjs, __tcfapi, __uspapi, __gpp) u tabu koji se snima, jer su ti objekti dostupni samo u kontekstu stranice. U isti tab se ubacuje i mala funkcija iz paketa koja se pretplaćuje na događaje slotova Google Publisher Tag-a i na posmatrač pomeranja rasporeda (layout shift), jer se renderi ne mogu pročitati naknadno, i obavija četiri googletag.pubads() poziva (refresh, enableLazyLoad, enableSingleRequest, collapseEmptyDivs) prolaznim omotačima koji zabeleže poziv pa pozovu original bez izmena; njen bafer je u window.__noniusPub, a ako stranica nema googletag komandnu listu, pravi praznu. Nikad ne blokira, ne menja i ne odlaže oglasne zahteve. U tabove koji ne snimaju ništa se ne ubacuje.

cookies

Automatsko prepoznavanje stanja pristanka: dok je snimanje uključeno, praćenje promena kolačića pristanka (CMP) koje vidi trenutna stranica snimanog taba (domen, putanja, secure, skladište kolačića tog taba), da bi svaki hit dobio tačno stanje (pre izbora, prihvaćeno, odbijeno) u trenutku okidanja. Vrednosti kolačića se ne čuvaju i ne izvoze; ostali kolačići i drugi sajtovi se preko chrome.cookies ne gledaju.

Pristup svim adresama (<all_urls>)

Audit se radi na proizvoljnom sajtu klijenta, a tagovi šalju zahteve na mnogo trećih domena (google-analytics.com, facebook.com, tiktok.com i drugi), pa se spisak domena ne može unapred navesti. Isto važi za redirekcije u Testu linka. Ova dozvola omogućava i pozive ka Iter API-ju iz pozadinskog procesa i preuzimanje ads.txt i sellers.json na klik.

Kontakt

Nonius Media, tim za razvoj. Pitanja o privatnosti ekstenzije: nikola@noniusmedia.com.

Nonius extension: privacy policy

The Nonius extension is a Chrome side panel that Nonius Media uses to audit tags, pixels and the ad stack on client websites, build UTM links and test campaign links. In short: the extension does not send what it records and keeps nothing after the browser closes, except what is listed here. The only requests it makes itself are the ones described under who receives data (the Iter API and, on click, public ads.txt and sellers.json files).

What the extension reads

• Network requests in the tab where recording is on. When the user clicks Snimi (Record) in the panel, or starts Test linka (Link test), which opens a new tab and records only that tab, the extension observes the requests that page sends (URL, method, request body) to recognize tags and pixels (e.g. Google Analytics, Meta Pixel) and ad requests. Nothing is read in any other tab. Requests are never blocked or modified.
• Page state in that tab: dataLayer contents (last 50 entries), Consent Mode signals, which cookie banner (CMP) is present, first-party cookie names (no values), the list of scripts with their size, and load timing. The page's own consent-banner cookies are turned into a consent state and their values discarded.
• The page's ad stack in that tab (Publisher panel): Google Publisher Tag state (ad slots, sizes, targeting, what was served, refresh, lazy load, layout shift per slot), Prebid.js (version, config, bidders, auctions and bids), the CMP's answers to __tcfapi, __uspapi and __gpp (including the TC string, decoded locally) and the presence of a Metior tag. All of it is read inside the page only while recording is on.
• Consent cookies of the recorded site. While recording is on, the extension watches changes only to the cookies in which a cookie banner stores the visitor's choice (e.g. OptanonConsent, CookieConsent, cookieyes-consent, euconsent-v2, by exact name; any other change is dropped immediately), and only cookies that the recorded tab's current page can actually see (domain, path, secure), from that tab's own cookie store (regular or incognito). The value is immediately turned into a consent state (before a choice, accepted, declined); the cookie value itself is not stored, shown or exported. No other cookies are read through chrome.cookies, and when no tab is recording, cookies are not watched.
• URL and title of the active tab, to prefill the UTM builder and bind a session to its tab.

Where data is kept

A recording session lives in extension memory and in chrome.storage.session, which Chrome clears when the browser closes. It is also deleted when the tab closes or when the user clicks Zatvori sesiju (Close session). The list of short links created during the current browser session is kept in chrome.storage.session and disappears when the browser closes.

The only data that survives closing the browser are the settings in chrome.storage.local: the Iter address, the Iter token and the default client for UTM conventions. The token can be removed in the extension settings (Settings) or by uninstalling the extension.

Izvezi HTML (Export HTML) creates a local file that the user saves on their own computer. The extension does not send it anywhere.

Who receives data

No one, except the Iter API (Nonius Media's link shortener, https://go.ndex.run by default), and only after the user has entered an Iter token. When the user clicks Skrati (Shorten), the destination URL and link title are sent. To read client UTM conventions (GET /api/settings) only the token is sent; this happens when the user opens the Iter or Settings tab (and after saving or clearing the token) or clicks Proveri vezu (Check connection) in Settings, never merely by opening the panel.

When the user clicks Proveri ads.txt (Check ads.txt) in the Publisher panel, the extension downloads the public ads.txt file of the site that the recorded tab is currently on and the sellers.json files of the ad partners that appeared on that site in the session (Prebid bidders, SSP domains seen in requests, Google). These are plain GET requests without cookies and without any user or session data. Of the sellers.json files only the entries for the wanted seller ids are kept, in the recording session (memory and chrome.storage.session, cleared when the browser closes) and in an HTML export if the user makes one; the full file is never kept. Nothing is downloaded without that click.

No analytics, telemetry, ads, sale or sharing of data with third parties. The extension does not load remote code: all code is in the package. Pages the user opens (including the ones opened by the Link test) send their own requests as usual; the extension only observes them.

Permissions and why they are needed

sidePanel

The whole UI is a side panel that stays open while the user navigates the site.

storage

chrome.storage.session keeps the recording session while the background process stops and restarts (cleared when the browser closes); chrome.storage.local keeps the Iter address, token and default client.

tabs

Reading the URL and title of tabs: the active tab (UTM builder, binding a session to a tab, recognizing pages that cannot be recorded, such as chrome:// and the Web Store, which are outside the host permission), the tab where the user clicks Snimi (Record) and the Link test tab (final landing URL). The recorded tab is reloaded when the user enters the banner choice in the Consent test.

webRequest

Observing, never blocking or modifying, requests in the tab where recording is on, including request bodies, because GA4, Meta and Prebid send data in the body; tracking redirects and the test tab's requests (pixels on the landing page) in the Link test. Listeners exist only while a tab is recording or a test is running.

webNavigation

Detecting a new page within a session (including SPA navigations) and client-side redirects in the Link test. The listeners stay registered only so that a navigation can wake the extension while a tab records; a navigation is processed only for a recording tab or while a test runs, and for other tabs it is ignored immediately and nothing is kept.

scripting

One-off read of page state (dataLayer, Consent Mode, CMP, scripts, first-party cookie names without values, the page's own consent-banner cookies, which are turned into a consent state and discarded, googletag, pbjs, __tcfapi, __uspapi, __gpp) in the recorded tab, because these objects are only reachable in the page's own context. In the recorded tab a small bundled function also subscribes to Google Publisher Tag slot events and a layout-shift observer, because renders cannot be read after the fact, and wraps four googletag.pubads() calls (refresh, enableLazyLoad, enableSingleRequest, collapseEmptyDivs) with pass-through wrappers that note the call and then call the original unchanged; its buffer lives in window.__noniusPub, and it creates an empty googletag command queue if the page has none. It never blocks, changes or delays ad requests. Nothing is injected into tabs that are not recording.

cookies

Automatic consent detection: while recording is on, watching changes to the consent (CMP) cookies visible to the recorded tab's current page (domain, path, secure, that tab's cookie store), so each hit gets the correct consent state (before a choice, accepted, declined) at the moment it fired. Cookie values are not stored or exported; other cookies and other sites are not looked at through chrome.cookies.

Access to all sites (<all_urls>)

Audits run on arbitrary client websites, and tags send requests to many third-party domains (google-analytics.com, facebook.com, tiktok.com and others), so the domains cannot be listed in advance. The same applies to redirects in the Link test. It also allows Iter API calls from the background process and the on-click download of ads.txt and sellers.json.

Contact

Nonius Media development team. Privacy questions about the extension: nikola@noniusmedia.com.

Last updated: 2 October 2026.