Privacy Policy
Siphon Stream Finder — browser extension
Last updated: 7 September 2026
Nothing leaves your device. There is no exception to that sentence.
The extension watches the addresses your browser is already requesting, notices the ones that look like a video or audio manifest, and lists them in its popup so you can copy them. That is the entire product.
It makes no network requests of its own. There is no server behind it, no account, no analytics, and no telemetry. Nothing is sold or shared, because nothing is collected in the first place.
What it looks at
The extension observes the URL of requests your browser
makes, and keeps only those matching a manifest pattern —
.m3u8, .mpd, .f4m, or a path that
looks like a streaming manifest. Everything else is ignored the instant
it is seen and is never written anywhere.
It reads request addresses only. It does not read the contents of any request or response, does not read page content, and does not inject anything into the pages you visit.
What it stores, and for how long
| Data | Where it lives | How long |
|---|---|---|
| Matched manifest URLs, grouped by tab | storage.session |
Cleared when you navigate, when the tab closes, and by the
browser itself when you quit — session storage never
touches disk
|
That is the complete list. There is no history, no profile, no identifier, and nothing that persists between browser sessions.
What is sent over the network
Nothing.
The extension has no backend to talk to. It never uploads the URLs it finds, never reports what you browse, and contains no analytics or crash reporting of any kind.
Copy, and “Send to Siphon”
Copy puts a URL on your clipboard. Nothing else happens.
Send to Siphon puts the URL on your clipboard and then
opens a siphon:// link, which your operating system hands to
the Siphon desktop app if you have it installed. That is a local
handoff between two programs on your own computer — the URL does not
travel over the network to reach Siphon, and no third party is involved.
Siphon the desktop app is separate software with its own behaviour. The extension works perfectly well without it: Copy and Copy all need nothing installed.
Permissions, and why each is needed
| Permission | Why |
|---|---|
webRequest |
To see the addresses of requests as they are made, which is the only way to notice a manifest. Used in observe-only mode — the extension cannot block, redirect or alter any request. |
<all_urls> |
Streams live on whatever site you happen to be on, and the extension has no way to know which site that will be. It is not targeted at any particular service. |
storage |
To hold the per-tab list in storage.session so it
survives the background worker being suspended.
|
tabs |
To know which tab is in front, so the popup shows that tab's list, and to clear the list when a tab navigates. |
On Firefox, <all_urls> is opt-in: the add-on is
installed without it and you grant it yourself.
What it deliberately does not do
- It does not download anything. It finds and copies addresses.
- It does not decrypt, bypass, or interfere with any protection on any stream.
- It does not read page content or inject scripts into pages.
- It does not load remote code. Everything it runs ships inside the package, as Manifest V3 requires.
- It does not track you across sites, build a profile, or retain any history.
Children
Not directed at children, and it collects nothing from anyone.
Your control
- Clear in the popup empties the current tab's list.
- Navigating or closing the tab clears it automatically.
- Quitting the browser clears everything.
- Uninstalling removes the extension and all of its local data.
Changes
Material changes will be reflected here with a new date, and noted in the extension's release notes.
Contact
Open an issue at github.com/ravandohq/privacy-policy/issues.