The Chrome Web Store requires each extension to have a single, easy to understand purpose and limits how it can use your data. You can use those rules as a pre install checklist: does the extension do one thing, ask only for what it needs, and describe its data use honestly?
Single purpose
The program policies say an extension needs one narrow purpose that is easy to understand. Clearly separate features should be separate extensions that users can install and uninstall individually.
For you, this is a quick test. If a listing promises a tab manager, a shopping assistant, a search bar and a news feed in one package, it is not following the spirit of the rule. It is also harder to judge, because each feature may need different access.
Limited use of data
The policies state that collection and use of web browsing activity is prohibited, and that data collection must be limited to what the disclosed single purpose requires. Data may not be used or sold for personalized ads, sold to data brokers, or used for credit or lending decisions. Transfers to third parties are allowed only in narrow cases, such as providing the single purpose, complying with law or preventing fraud. Developers must publicly state their use follows the Limited Use requirements.
When ownership changes, the policy says that if a developer transfers user data during a merger, acquisition or asset sale, it must first get the user's explicit prior consent.
Honest marketing
Extensions must be marketed honestly. Prohibited tactics include misleading ads, buttons that imply something other than installing an extension, hiding listing metadata, bundling other extensions into the install flow, and requiring unrelated actions to unlock advertised features.
Turn it into a checklist
Before you click Add to Chrome:
- Can you state its purpose in one sentence?
- Do the permissions match that purpose?
- Does the privacy section say what data it collects and why?
- Did you arrive from the store, not from an ad or pop up that pushed you?
- Is the developer one you can identify?
Limits of the policies
Rules are not a guarantee. Chrome's help notes that extensions count as trusted when their developers follow the program policies, and that with Enhanced protection on, Chrome warns you about extensions that are not trusted. New developers can take a few months to earn that status. That helps, but it is a signal, not proof.
Read the myth that official store means safe for how to balance this.
Quick check
Are all extensions required to have a privacy policy link?
This post does not cover that detail. The policies do require disclosure of data use, so check the listing's privacy section and the full program policies.
Who enforces these rules?
The Chrome Web Store program does, through review and removal. Reporting problems and keeping permissions tight remain your job too.
Sources
Last reviewed: 19 October 2026.
