SR Privacy Monitor by Simon Ringwelski

Privacy Monitor is a privacy auditor for Firefox. It answers one question: what did this site attempt to store, contact, load, or track about me?

It only observes and reports. It does not block cookies, cancel requests, change web pages, or replace your search, homepage, or new tab page.

Reports only. Never blocks. Data stays on this device.

What it records on each site

• First-party and third-party cookies, including whether third-party cookies are partitioned
• Third-party requests (scripts, images, iframes, beacons, pixels)
• localStorage, sessionStorage, and IndexedDB keys
• Fingerprinting-related APIs (canvas, WebGL, audio, WebRTC, and similar), with a low / medium / high confidence label
• Advertising click IDs in the page URL
• Trackers hidden behind a first-party CNAME

Known advertising, analytics, and social-tracking hosts come from the Disconnect Tracking Protection list, plus a short extras list. Same-company hosts (for example LinkedIn loading licdn.com) are labeled as that company's infrastructure, not as trackers. Consent tools and bot-defense services are labeled but not counted as trackers.

How it works

By default it auto-monitors every website you open. You can turn that off in Settings and use Scan this site instead. A toolbar popup, a Firefox sidebar, and a full report page show the live results.

To see storage writes and fingerprinting API calls, the add-on injects an observation script into web pages. That script wraps a few built-in APIs so those calls can be listed. It does not change what the page stores or whom it contacts.

What is stored on this device

Visit reports stay in your browser only. Nothing is uploaded. History is kept for up to 80 visits or 30 days, whichever comes first. You can delete it in Settings. Private window visits can be watched live if you allow the add-on in private windows; those visits are not saved.

Permissions

The add-on asks for access to all websites, cookies, tabs, network requests, navigation, local storage, and DNS. It uses these to watch what the current site stores and contacts. It does not modify requests or cookies.

Tracker names include data from Disconnect Tracking Protection (CC BY-NC-SA 4.0).

Made by Simon Ringwelski.