GamifyChrome Chrome extension security report

GamifyChrome is an innovative Chrome extension that transforms routine web browsing into an engaging, game-like experience by tracking user activity, awarding experience points (XP), maintaining streaks, and offering quests and achievements. Developed to motivate productive browsing habits while providing rich analytics, GamifyChrome converts browser history, tab usage, and research patterns into motivational game mechanics with detailed statistical feedback. The extension was created by ALAgrApHY and turns everyday internet use into a personalized adventure with leveling, rewards, and visual progress tracking. Core Functionality: The extension operates through several interconnected systems that work together to create a comprehensive browsing gamification platform: 1. Activity Tracking: Monitors tab updates, categorizes visited websites by purpose (development, social, learning, news, entertainment, shopping, productivity, search, or other), and logs browsing patterns including time of day, visit frequency, and domain uniqueness. 2. Experience System: Awards XP for various browsing activities: - Base XP (1 point) for regular site visits - Bonus XP (15 points) for visiting new unique domains - Additional XP for completing quests and achievements - Level progression based on cumulative XP using an exponential formula (level² × 75) 3. Streak Mechanics: Tracks consecutive days of browsing activity, rewarding consistent engagement with visual streak indicators and related achievements. 4. Quest System: Presents daily objectives that encourage varied browsing behavior: - Visit 10 unique sites in a day - Complete a research session (5+ domains in 30 minutes) - Explore 3 different website categories - Perform 5 search queries Quests reset daily and award bonus XP upon completion. 5. Achievement System: Recognizes long-term milestones with permanent rewards: - First Steps (1 site visited) - Explorer milestones (50/100 unique domains) - Polymath (6+ categories browsed) - Streak achievements (3/7/30 days) - Researcher (10 research sessions) - Level achievements (Level 5/10) - Query Master (100 searches) - Marathon Surfer (500 visits) 6. Analytics Dashboard: Provides comprehensive visualization of browsing patterns: - Daily activity charts (7-day history) - Top domain rankings - Time-of-day browsing patterns (morning/afternoon/evening/night) - Hourly heatmap visualization - Category distribution analysis - Interest tag extraction from search queries - Recent achievements display Technical Implementation: GamifyChrome leverages modern Chrome extension APIs and web technologies: - Manifest v3 Configuration: Defines required permissions (history, tabs, storage, alarms), browser action with popup interface, and background service worker registration - Background Service Worker: Continuously monitors tab updates via chrome.tabs.onUpdated, processes browsing data, updates statistics, and manages daily quest resets through chrome.alarms - Local Storage: Utilizes chrome.storage.local API to persist user data including XP, levels, streaks, domain history, category stats, quest progress, and achievements between browser sessions - History API: Employs chrome.history.search to retrieve browsing history for analytics and visualization in the popup interface - Tabs API: Uses chrome.tabs.query to count open tabs for dashboard statistics - Responsive UI: HTML/CSS/JavaScript popup with futuristic cyberpunk-inspired design, animated elements, canvas-based charts, and interactive components - Data Analysis Pipeline: Processes raw history data into categorized statistics, time-based patterns, domain frequencies, and keyword extraction for interest detection User Experience: Upon clicking the extension icon, users encounter a visually striking interface with multiple tabs: Dashboard Tab: - Player Card: Shows avatar (based on top browsing category), player name (level-based title), level badge, and streak counter - XP Progress Bar: Visual representation of current level progress with animated pulse effect - Today's XP Hero: Prominent display of experience points earned today - Stat Cards: Key metrics including unique domains visited, open tabs, and total visits - Category Bars: Visual breakdown of today's browsing by category (development, social, etc.) - Recent Achievements: Display of the three most recently unlocked achievements Stats Tab: - Daily Activity Chart: Bar chart showing visit counts for the past 7 days - Top Domains List: Ranked visualization of most frequently visited domains - Time Pattern Bars: Percentage distribution of browsing across morning, afternoon, evening, and night periods - Hourly Heatmap: Grid visualization showing browsing intensity by hour of day - Interest Tags: Keywords extracted from search queries representing user interests Quests Tab: - Daily Quest List: Display of active daily objectives with progress bars, completion status, and XP rewards - Reset Timer: Countdown to daily quest reset at midnight Wins Tab: - Achievement Grid: Complete list of all possible achievements with lock/unlock status, icons, names, and descriptions - Visual Indicators: Locked achievements appear grayed out; unlocked ones show special badges and glowing effects Visual Design Features: - Futuristic cyberpunk aesthetic with neon colors (cyan, green, amber, pink, purple) on dark backgrounds - Animated scanline overlay for authentic retro-futuristic feel - Pulsing XP bar and today's XP counter for dynamic feedback - Glowing effects on active elements and achievements - Smooth transitions and hover states for interactive components - Responsive canvas-based charts that redraw when tabs become active - Orbitron and Exo 2 fonts for technological theme consistency Data Processing and Algorithms: The extension employs several key algorithms to transform raw browsing data into meaningful game mechanics and analytics: URL Categorization: - Maintains predefined patterns for each browsing category (e.g., development includes github.com, stackoverflow.com, localhost) - Uses substring matching against lowercase URLs to determine primary category - Falls back to 'other' category for unmatched URLs Domain Extraction: - Utilizes URL API to extract hostname from web addresses - Removes 'www.' prefix for cleaner domain representation - Returns null for invalid or inaccessible URLs Search Query Parsing: - Identifies search URLs from major engines (google.com, bing.com, etc.) - Extracts 'q' parameter value as the search query - Returns null for non-search URLs Experience Calculation: - Implements exponential level progression: XP required for level N = N² × 75 - Current level determined by finding highest level where cumulative XP ≥ required XP - Level titles selected from predefined array based on current level Streak Calculation: - Compares last visit date with today and yesterday - Increments streak if last visit was yesterday - Resets streak to 1 if last visit was earlier than yesterday - Maintains streak if multiple visits occur today Quest Progress Tracking: - Research Session: Tracks unique domains visited in last 30 minutes via session log with timestamp filtering - Category Exploration: Maintains daily list of visited categories - Search Queries: Filters history for searches made today - Unique Sites: Tracks domains visited today for the visit10 quest Keyword Analysis for Interests: - Tokenizes search queries by splitting on non-word characters - Filters out common stopwords (the, and, for, etc.) and short words (< 4 characters) - Counts occurrences of remaining keywords to identify trending interests Privacy and Security: GamifyChrome prioritizes user privacy through several key design choices: - Local-Only Processing: All browsing data analysis occurs client-side; no information is transmitted to external servers - Selective History Access: Requests only the 'history' permission specifically for analyzing browsing patterns, with no data leaving the user's browser - Minimal Data Retention: Limits history analysis to the past 7 days for performance and privacy - Sensitive URL Filtering: Automatically ignores Chrome internal pages (chrome://, chrome-extension://), about: pages, and edge:// URLs during tracking - User-Controlled Data: Although not currently implemented, the storage foundation allows for future data export/deletion features - Transparent Operation: Clear indication of what data is being tracked through the extension's analytics displays - No Personal Data Collection: Focuses solely on browsing behavior metrics (domain visits, time patterns, category distribution) rather than personal information or message content