Flagged Chrome extension security report

Flagged lets you filter your X (Twitter) timeline based on where accounts are registered — all locally in your browser, with no external servers involved. FILTER MODES • Blocklist — blur or hide posts from accounts in specific countries • Allowlist — blur or hide everyone except accounts from allowed countries • Flag Only — no filtering; just add country flag badges to every username HIDE MODES • Blur — overlay a blur with a "click to reveal" button • Hide — completely remove the post from your timeline FEATURES • Enter countries by name, flag emoji, or ISO code — one per line • Continents supported (Asia, Europe, Africa, etc.) • Per-handle whitelist — accounts that are never filtered • Per-handle blacklist — accounts that are always filtered • Country flag badges next to every username (hover for full country name) • Local IndexedDB cache • Import / Export cache to back up or share with others • Your own posts and your bookmarks are never hidden DATABASE (recommended) Out of the box, Flagged resolves account countries by querying X's internal GraphQL endpoint in the background — one account at a time. This works, but first-time encounters won't be filtered instantly, and X rate-limits these lookups after a burst, pausing new lookups for a few minutes. Importing a community database (available on Telegram: t.me/pillgatesflagged) pre-loads hundreds of thousands of already-resolved accounts into your local cache. Filtering becomes instant and accurate from the very first scroll, with no lookups needed for those accounts. The extension works fine without a database, but coverage is dramatically better with one. PRIVACY All processing happens locally in your browser. No data is sent to any external server. The extension reads only public country information from X's own servers — the same data visible on any public profile page.