NexDM logo
NeXDM

Browser Extension Security & Permissions

A 100% transparent audit of what our Chrome & Edge extension accesses and why.

🛡️ Our Zero-Access Privacy Guarantee

The NeXDM browser companion extension operates under a strict Privacy by Design standard. We do NOT collect browsing history, do NOT read input form data or passwords, do NOT inspect cookies, and do NOT transmit any analytical telemetry to remote servers. All download routing occurs locally on your PC.

Manifest V3 Permission Breakdown

Google Chrome and Microsoft Edge require extensions to declare explicit permissions. Below is the technical rationale for each permission declared in our manifest.json:

"downloads"

Download Interception

Why It's Needed: Allows the extension to detect when you click a standard file download link in your browser and automatically hand the URL over to the high-speed NeXDM desktop client instead of the single-threaded native browser downloader.

Scope: Only triggered when a file download is initiated.

"nativeMessaging"

Local Desktop Communication

Why It's Needed: Enables secure, encrypted local Inter-Process Communication (IPC) via standard input/output pipes between the browser tab and the NeXDM Rust desktop engine installed on your PC.

Scope: Completely local (localhost IPC). No internet servers are involved.

"contextMenus"

Right-Click Menu Integration

Why It's Needed: Adds the "Download with NeXDM" option to your browser's right-click context menu when clicking on hyperlinks, image files, or media streams.

"storage"

Local Settings Storage

Why It's Needed: Stores your extension preferences (such as auto-capture file extensions list and dark mode preference) locally inside your browser profile.

"webRequest" / "declarativeNetRequest"

Media Stream Header Detection

Why It's Needed: Inspects HTTP response headers (such as Content-Disposition: attachment and video MIME types) to present the 1-click NeXDM Download bar when media files are played.

Scope: Only response MIME headers are matched. Body content and user sessions are never read.

Have a security question or want to report a concern?

Contact Security Team (security@nexdm.in)