SentinelBlock Ad Blocker Chrome extension security report

SentinelBlock is a privacy-first, serverless ad blocker built on Chrome's Manifest V3 declarativeNetRequest API. It blocks ads, trackers, popups, cookie banners, malware domains, and social widgets — all without collecting any data. ─ WHY SENTINELBLOCK ─ • Zero data collection. No analytics. No telemetry. No "phone home." The extension has no servers, no accounts, and no way to track you. Your browsing stays yours. • Everything is local. All 16,560+ blocking rules are bundled with the extension. There are no remote fetch lists, no background pings, and no external dependencies. • Performance by design. The declarativeNetRequest API blocks ads at the network level — before your browser even loads them. No JavaScript overhead per request. ─ FEATURES ─ ✓ Blocks banner ads, video ads, pop-ups, and floating overlays ✓ Stops tracking scripts, analytics beacons, session recorders, and fingerprinting ✓ Hides cookie consent banners and auto-clicks "Reject All" where supported ✓ Blocks cryptominers, malware, and phishing domains ✓ Removes embedded social media widgets and share buttons ✓ Element picker — click any element to permanently block it ✓ Element zapper — hover-and-click to temporarily hide elements ✓ Site whitelist — disable blocking on sites you want to support ✓ Custom CSS rules for fine-grained element hiding ✓ Import/export your settings ✓ Keyboard shortcuts (Alt+Shift+B to toggle, Alt+Shift+Z to zap) ✓ Context menu integration — right-click to block elements or domains ✓ Dark mode support ─ FILTER LISTS (6 rulesets, 16,560+ rules) ─ • Ads & Banners — ad networks, ad servers, banner domains • Trackers & Analytics — analytics, session recording, fingerprinting • Annoyances — cookie banners, push prompts, newsletter popups • Malware & Phishing — cryptominers, known malware domains • Social Widgets — Facebook, Twitter, LinkedIn embedded widgets (off by default) • Regional Ads — country-specific ad networks (off by default) ─ PRIVACY ─ No data collection whatsoever. No analytics, no telemetry, no accounts, no sign-ups. No remote code. All blocking rules bundled locally. Settings sync via your browser account (optional, encrypted in transit). Open source — fully auditable. ─ PERMISSIONS ─ • declarativeNetRequest — Block network requests (the core engine) • declarativeNetRequestFeedback — Read matched rule counts for the blocked counter • activeTab — Inject the element picker and zapper on the current page • storage — Save whitelist, settings, and custom rules • scripting — Inject content scripts for element hiding and popup blocking • alarms — Daily sync of whitelist and blocked domain rules • contextMenus — Right-click menu for blocking elements and domains