Permissions
Every permission, and why.
Chrome shows these when you install. This is the full list from the extension's manifest; a test keeps the two in sync. The extension does not ask for history, downloads, bookmarks or the sessions permission.
- 01 ·
<all_urls>Read and change your data on all websites - A container has to work on any site you open in it: it swaps in the container's cookies on requests and keeps each container's site storage apart. Pages in normal tabs are left alone, unless you bring a sign-in from one into a container.
- 02 ·
declarativeNetRequestWithHostAccessChange requests in container tabs - Chrome itself puts each container's cookies on requests from that container's tabs, through rules this extension sets. Nothing is routed through a server.
- 03 ·
webRequestSee responses in container tabs - To store the cookies a site sets in a container tab in that container, instead of in your normal browser cookies.
- 04 ·
webNavigationKnow when container tabs open new tabs - So links, popups and sign-in windows opened from a container tab stay in the same container.
- 05 ·
tabGroupsManage tab groups - To group container tabs under the container's name and color.
- 06 ·
storageStore data on this computer - Containers and their cookies are kept in the extension's own storage on this computer.
- 07 ·
unlimitedStorageStore more than 10 MB - Busy containers hold many cookies; this keeps Chrome from refusing to save them.
- 08 ·
contextMenusAdd right-click menu items - "Open link in container" and "Reopen this page in".
- 09 ·
alarmsRun daily housekeeping - A daily local snapshot of your containers and cleanup of expired cookies.
- 10 ·
notificationsShow notifications - Only to tell you when a sign-in seems stuck in a container.
- 11 ·
faviconRead site icons - To show site icons in the container list and draw the container dot, from Chrome's own icon cache.
- 12 ·
browsingDataRemove service workers - A site's service worker from normal browsing runs outside any tab and would answer container tabs with your normal account. When you open the site in a container, its service worker is removed. Nothing else is deleted, but the site's offline mode and notifications in normal tabs can stop.
- 13 ·
cookiesRead your browser cookies - Not part of the install. The extension asks Chrome for it the first time you copy a sign-in you already have into a container, and Chrome gives it without asking you again: reading and changing your data on all websites already covers cookies. It is used to list the sites that have cookies in normal browsing and to copy the ones you pick. Containers keep their own cookies without it, and normal browsing keeps its cookies either way.