Privacy: browser extension and WordPress plugin

Last updated: 13 November 2026

HolicAudit: SEO & Security Headers Checker (Chrome extension)

On-page SEO tab. When you open the extension, it reads the page in your current tab (title, meta tags, canonical, headings, image alt attributes, structured data count) using Chrome's activeTab and scripting permissions. This happens inside your browser. Nothing is sent anywhere.
Full SEO check and security headers buttons. Only when you click one of them, the extension sends the address of the current tab to our server at audit.huutran.dev, which loads that page once and returns the results. This is the same free check as on audit.huutran.dev/seo-check and security.huutran.dev/headers-check, covered by our privacy policy: we keep the result for a limited time so the share link works, and count checks per IP address to limit abuse.
Stored in your browser. Your language choice (English or Vietnamese) and the host and time of your last remote check, in Chrome's local extension storage. Remove them by uninstalling the extension.
Not collected. No browsing history, no page contents, no cookies, no analytics, no advertising identifiers. We don't sell or share data and don't use it for anything except running the check you asked for.

The plugin runs on your own server. When an administrator clicks "Run the check", it requests your own home page once (a loopback request) and reads WordPress settings.
It sends nothing to HolicAudit or any third party, sets no cookies and adds nothing to your public pages. The result is cached in your database for 12 hours (a transient) and deleted when you uninstall the plugin.
The plugin page links to our free online checks. They open only if you click them; your browser then sends your home page address to audit.huutran.dev as described above.

Questions or deletion requests: hello@huutran.dev.