CaptureLab 360 Security & Permission Guide

Single purpose

CaptureLab 360 lets a user capture the currently selected browser page, annotate and redact the resulting screenshot locally, export it, and optionally record the selected tab through a local desktop companion.

Permissions activate only as part of a capture, export or recording action requested by the user.

Permission explanations

activeTab

Temporarily accesses only the tab selected by the user after the toolbar button or capture control is clicked. It avoids persistent background access to unrelated tabs.

scripting

Reads viewport dimensions, displays the selected-area overlay, identifies the active scroll container, temporarily manages sticky elements and scrolls the selected page during full-page capture. It is not used for advertising, tracking or content harvesting.

downloads

Saves screenshot and edited-image files requested by the user. CaptureLab 360 does not inspect or manage unrelated downloads.

storage

Stores local user preferences, capture state and temporary editor records. This data is not synchronized to ConvertLab360 servers.

offscreen

Stitches captured image tiles and encodes exports outside the short-lived popup lifecycle. It can also maintain a recording initiated by the user while the popup is closed.

tabCapture

Records video or audio from the browser tab explicitly selected by the user. CaptureLab 360 does not silently record unrelated tabs.

nativeMessaging

Connects only to the optional locally installed CaptureLab 360 desktop companion for a recording session. Ordinary screenshots and editing do not use native messaging.

Page and host access

The manifest does not request <all_urls> or persistent host permissions. Chrome protected pages, including most chrome:// pages and the Chrome Web Store, cannot be captured.

Remote code and external services

All executable extension code is included in the submitted Manifest V3 package. CaptureLab 360 does not download or execute remote JavaScript or WebAssembly and does not include an advertising or analytics SDK.

Report a security or privacy issue