FrameFrame home
Browser extension

Settings forthis browser.

A small extension for Chrome, Brave, Edge and Firefox. The protections work with no account. It does not make you anonymous, and it is not a VPN.

Get it for Firefox View the source on GitHub

Not in the Chrome Web Store yet. Sign-in works on Chrome, Brave, Edge and Firefox. The protections do not need an account.

A Chrome window on example.com. The Frame popup is signed out, shows an empty Privacy Score, and protections such as WebRTC, fingerprinting and Global Privacy Control are switched on.
Captured in Chrome, in English. Protections are on. No account is required.
In the browser

Open ona normal page.

  • One site at a time.

    Fingerprinting can be off for example.com and left on everywhere else. www.example.com is a different site. The other protections stay on.

    Browser fingerprinting, explained

    A Chrome window on example.com. In the Frame popup, fingerprinting is off for that site only, and the card says the choice is saved for this site.

  • Clean tracking links.

    On by default. Frame strips a fixed list of tracking parameters, such as utm_source and fbclid, when you open a page. ref and id stay. si is removed only on YouTube and Spotify. You can turn it off for a site and its subdomains.

    A Chrome window whose address bar shows example.com/?ref=homepage after utm_source and fbclid were removed. Clean tracking links is switched on in the Frame popup.

  • Forget this site.

    The button is in the panel for the site you are on. It asks on the spot, then clears that site’s data on this device and offers to reload. You are signed out of that site. History, and data the site already kept, stay.

    The Frame popup on example.com asking to confirm Forget this site, with Clear data and Cancel. The note says this signs you out and does not erase history or data the site already kept.

  • Then, reload.

    After the clear, the popup says the cookies and site data were removed, and it offers to reload the tab.

    The Frame popup after Forget this site, saying cookies and site data for example.com were cleared, with a Reload tab button.

  • A score, if you sign in.

    This picture is the extension’s preview account, and the popup says so. A real sign-in shows your privacy score and open exposures. The toggles do not need an account.

    A Chrome window on example.com with the Frame popup signed in to its preview account, Ada at ada@example.com. It shows a Privacy Score of 72 (Fair) and says the data is preview, not connected.

  • Every setting, on one page.

    The options page describes each protection, any site you have excepted, and why each permission is there.

    A Chrome window open to the Frame options page, headed “This browser.”. Privacy Score, email aliases, and the protections list are visible; Clean tracking links is described there.
What it changes

On by default.Plain about the limits.

Each one is a browser setting or a small script on the page. You can turn any of them off. Fingerprinting can be turned off for the site you are on. Clean tracking links can be turned off for that site and its subdomains.

  • WebRTC IP leak protection

    What it does

    Stops sites from seeing this device’s local IP address during a call.

    What it doesn’t

    It does not hide the public IP address your provider assigns you. Some video calls fail until you turn it off. A VPN is still what hides the public address.

  • Clean tracking links

    What it does

    Strips a fixed list of tracking parameters, such as utm_source, fbclid, gclid and msclkid, from pages you open. The page still loads. On YouTube and Spotify, a share link also loses si.

    What it doesn’t

    It does not change other requests. Ordinary parameters such as ref and id stay. Turn it off for a site when a link breaks. That choice covers the site’s subdomains.

  • Fingerprinting protection

    What it does

    Blends in. Canvas, WebGL, offline audio, processor count, device memory and font checks are nudged toward common values, per site. A font the page provides itself is left alone. Local Font Access behaves as if you never granted it.

    What it doesn’t

    It does not invent a random fingerprint, and it does not make you anonymous. Live audio, very large canvases and text measurement stay as they are, so a site can still guess some fonts. It can also break a site. Turn it off for that site only. www.example.com and example.com are different sites.

    Browser fingerprinting, explained

  • Block third-party cookies

    What it does

    Blocks cookies set by other sites. The site you are visiting can still set its own.

    What it doesn’t

    The browser may already block these, or a policy may lock the setting. After you interact with an embedded site, the Storage Access API can still grant it cookie access.

  • Global Privacy Control

    What it does

    Tells sites you don’t want them to sell or share your activity. It sends the Sec-GPC header and sets the flag pages can read.

    What it doesn’t

    Sites and ad networks can ignore it. A worker started by a page may not see the JavaScript flag. This is a request, not a block.

  • Ad topics and measurement

    What it does

    Turns off Topics, Protected Audience and ad measurement where this browser has them.

    What it doesn’t

    An extension can turn them off. The browser rejects turning them back on. Switching Frame’s toggle off clears Frame’s choice and leaves the browser’s own default. Some browsers do not have these settings.

  • Hyperlink auditing

    What it does

    Stops the ping a link can send when you click it.

    What it doesn’t

    It does not stop navigator.sendBeacon, tracking pixels or scripts.

  • Network prediction

    What it does

    Stops the browser from prefetching and prerendering sites it thinks you will open.

    What it doesn’t

    A page can still start its own preconnect. Pages may feel a little slower.

  • Trim cross-site referrers

    What it does

    Asks the browser to send the full address only to the same site.

    What it doesn’t

    A page can set its own referrer policy and override this. Manifest V3 cannot rewrite a Referer header that is already on the way out. Turning this off does not strip every referrer.

Forget this site.

This one is a button, not a switch that stays on.

What it does

In the panel for the site you are on, after you confirm, it clears that site’s cookies, local storage, session storage, IndexedDB, cache storage, service workers and the HTTP cache where the browser can scope them. Subdomains seen in cookies are included. It then offers to reload. You are signed out of that site.

What it doesn’t

It does not erase history, and it does not delete data the site already stored on its servers. Chrome also clears cookies for the wider site. Open tabs drop session storage.

Also on, unless you turn them off

  • Do Not Track

    Sends the DNT header. Many sites ignore it. Global Privacy Control is the signal they are more likely to read.

  • Search suggestions

    Stops the address bar from sending what you type to the default search engine. A search you submit, and suggestions inside a website, are unchanged.

  • Navigation error reports

    Stops Chrome from sending a failed address out for a suggested error page. This is a Chrome service. Other browsers may not offer it. You get the browser’s own error page instead.

When Frame can’t

It says so.It doesn’t override it.

If another extension or a browser policy already controls a setting, the popup names that and the switch stays locked. Frame does not pretend the setting is its own.

What it collects

Nothing,until you sign in.

Signed out

Frame’s servers receive nothing from the extension. Your browsing, the pages you open and the toggles are not sent anywhere. Toggles and per-site exceptions stay in the extension’s storage on this device.

Signed in

Signing in is optional. On Chrome, Brave, Edge and Firefox, the extension opens frameprivacy.com, you approve it on the connect page, and the popup then shows your privacy score and open exposures. The token is limited. With it, the extension can read your name, your email, your privacy score, how many findings are still open, and the score for each area.

With that token, it cannot

  • Sign in as you, change your account, start a removal, or read the details behind a finding.
  • See your password, your sessions, or your other devices.
  • Send the website’s cookies along. Requests to Frame omit them.

Disconnect it any time in Settings, under Sign-in and security. That revokes the token immediately. Access tokens last 15 minutes. Refresh tokens last 30 days, rotate on every use, and a reused one signs the extension out.

The extension asks to run on the http and https sites you visit, so it can set the privacy headers and the fingerprint script. It does not copy page contents into a Frame account.

Open source

Read ityourself.

The extension is public source, including the tests for the settings, the header rules and the fingerprint policy. The same project builds the Chrome and Firefox versions. There is no closed piece, and the toggles do not hide an account requirement.

View the source on GitHubSee the platform

Breach Check, removal and the Frame agent live in your account. The extension does not require them.

Install

Firefox from Add-ons.Chrome from source.

On Firefox, install Frame from Mozilla Add-ons. It is not in the Chrome Web Store yet, so on Chrome, Brave and Edge you load a local build. The protections work as soon as it is installed.

When a Chrome Web Store listing exists, this page will link to it too.

Chrome, Brave and Edge

  1. Clone the repository, then run npm install and npm run build.
  2. Open chrome://extensions, edge://extensions or brave://extensions.
  3. Turn on Developer mode, choose Load unpacked, and select the .output/chrome-mv3 folder.

Firefox

  1. Open Frame on Firefox Add-ons (addons.mozilla.org).
  2. Choose Add to Firefox and review the permissions it asks for.
  3. Pin Frame from the extensions menu so the popup is one click away.

Get it for Firefox

Building Firefox from source instead? Run npm run build:firefox, open about:debugging#/runtime/this-firefox and load .output/firefox-mv3/manifest.json as a temporary add-on. A temporary add-on is removed when Firefox closes. The toggles work either way.

Permissions

Why it asksfor each one.

These are the permissions in the manifest. None of them is used to read a page into your Frame account.

storage
Saves your toggles, per-site exceptions, and the Frame session on this device.
privacy
Reads and changes the browser privacy settings above, and checks whether another extension or a policy already controls them.
identity
Opens frameprivacy.com so you can sign in, and receives the redirect. It does not read a Google account, and it never asks for your Frame password.
scripting
Injects the fingerprint normalizer and the Global Privacy Control flag into pages you visit.
declarativeNetRequest
Adds the Sec-GPC request header and a Referrer-Policy response header, and removes tracking parameters from pages you open.
browsingData
Clears cookies, storage, cache and service workers for a site when you choose Forget this site. It is not used for anything else.
cookies
Reads cookie domains so Forget this site can include subdomains. Cookie values are not saved or sent to an account.
Host access, http and https
Those page scripts and header rules have to run on the sites you visit. Page contents are not sent to an account.
frameprivacy.com
Calls the sign-in API after you connect. The request does not include the website’s cookies.
FAQ

Questions,answered.

Something else? support@frameprivacy.com

  • No. It turns down a few ways a site can recognize this browser, or see a local IP address during a call. Your public IP is still visible. It is not a VPN, and it does not replace a separate browser profile.