1. The short version
o-flag has a single purpose: showing the likely country or region of the current website in your browser toolbar and popup. It doesn’t require an account or sign-in. Most processing happens in your browser, with third-party requests used to support region detection.
The extension does not sell personal data, use data for advertising or profiling, use data for creditworthiness decisions, or execute remote code. It does not read page content, form entries, passwords, emails, messages, or payment information.
2. Data the extension processes
To show a region for the page you’re visiting, o-flag may process:
- Page URL and hostname. The address of a top-level HTTP or HTTPS page in a browser tab.
- Network metadata. Main-frame request and response information, including response headers and the server IP when the browser makes it available.
- Your public IP address. Used to choose a relevant DNS lookup path and associate cached results with your network context.
- Lookup results. Hostname-to-IP mappings, IP-to-country mappings, and country codes derived from Cloudflare response metadata.
3. How that data is used
This information is used to determine a website’s likely region, display its flag and details, and reapply the correct indicator as you navigate. Local caching reduces repeated network lookups.
Extension data is used for these features, not for unrelated analytics, advertising, or profiling. A displayed region can reflect a CDN edge location rather than the original server or the website owner’s location.
4. Extension permissions
- Host permissions for HTTP and HTTPS pages: allow the extension to detect a region for websites you visit.
tabs: identifies the current tab, reads the page URL, and sets the tab’s icon and title.storage: saves lookup information locally so it can be reused.webNavigation: detects top-level navigation so the region indicator can be updated.webRequest: observes top-level network metadata used in region detection. The extension does not block, redirect, or modify requests.
5. Third-party services
The extension makes HTTPS requests to these services as part of its region-detection feature:
| SERVICE | PURPOSE |
|---|---|
https://td5s.co/ip | Retrieves your current public IP address. |
https://doh.pub/dns-query | Resolves DNS records for the current hostname. |
https://www.ip112.com/api/ip | Looks up location information for an IPv4 address. |
https://www.ip112.com/api/geoip | Looks up a country code for other IP addresses, including IPv6. |
When contacted, these providers may receive the queried hostname or IP and ordinary request metadata, such as your IP address, user agent, and request time.
These services operate under their own privacy practices, and their infrastructure may be in countries or regions different from yours. Their responses are treated as data. The extension does not download or execute remote scripts or modules.
6. Storage and retention
Lookup caches are stored on your device using Chrome extension storage and IndexedDB. They are not synced through a cloud account.
- Your public IP: cached for approximately one hour before it needs to be refreshed. Expiration does not necessarily delete the stored record immediately.
- Domain and Cloudflare-derived results: entries older than approximately seven days are eligible for cleanup when the extension performs its cache cleanup. A refresh can renew an entry.
- IP-to-country results: the current implementation does not set an automatic expiration time for these records. They can remain until replaced or the extension’s stored data is removed.
Removing the extension removes its locally managed data through Chrome’s extension removal process. Disabling it stops processing but does not itself clear stored data.
8. This website
The o-flag website is a static introduction to the extension. It does not run the extension’s DNS or IP lookups. Product previews use illustrative data rather than information about you or your current tabs.
This website adds no analytics scripts, advertising scripts, tracking cookies, account system, or data-entry forms. Its images, styles, and other assets are served from the website itself.
As with ordinary web hosting, infrastructure providers may process basic request information, including IP addresses and request times, to deliver and secure the website. If you follow a link to the Chrome Web Store or GitHub, that service’s privacy policy applies.
9. Security
o-flag keeps caches on your device and sends network lookups to the listed services over HTTPS. It aims to limit access to information needed for region detection. No storage or network service can guarantee absolute security.
10. Your choices
- You can stop extension processing by disabling or uninstalling o-flag.
- Uninstalling the extension removes its extension-managed local data through Chrome.
- You can also clear extension storage through browser tools where your browser supports this.
11. Children’s privacy
The extension is not directed to children and is not designed to knowingly collect personal information from children.
12. Changes to this policy
This policy may be updated to reflect changes to the extension, its services, or applicable requirements. The current version will be available on this page with an updated revision date.
13. Contact
For questions about privacy or support, reach the developer through the o-flag GitHub support channel (opens in a new tab).
A little more clarity, so you can keep exploring.
Back to o-flag