Extension Permissions

PhotoShow operates entirely within your local browser environment. Any permissions requested are solely used to enable features such as image previews, downloads, etc. PhotoShow does not access or manipulate unrelated data.

• Read and change all your data on all websites
  This permission is necessary for PhotoShow to function across all websites. PhotoShow does not read or modify content unrelated to its core functionality.

• Manage your downloads
  Required for enabling image downloads through PhotoShow. PhotoShow does not read or retain your download history.

• Modify data you copy and paste
  This optional permission is used only for enabling features such as copying images or their URLs to the clipboard. PhotoShow does not access or read your existing clipboard content and has no permission to do so. Users are prompted before this permission is requested for the first time.

How Data Is Collected and Stored

All usage data is sent to Google Analytics using its Measurement Protocol API. PhotoShow's author and developers:

• Do not own, store or directly access the data

• Do not use tag-based approaches (e.g., gTag, GTM) for collecting usage data  

• Do not share or combine the data with any third parties

Google Analytics Advertising Consent Handling

PhotoShow explicitly denies consent for advertising-related data collection in all analytics payloads:

•  ad_user_data  and  ad_personalization  parameters are always set to  "denied" 

• No data is expected to be used for ad targeting or profiling

For technical documentation, see Google Analytics Consent Parameters.

Privacy Considerations for Image Download Filename Placeholders

PhotoShow's Image Download feature allows downloaded image filenames to be customized using filename placeholders. Depending on the placeholders used, generated filenames may include information derived from webpages, images, browser context, or other available metadata. In some cases, such information may be personal, confidential, or otherwise sensitive.

Users are solely responsible for reviewing and understanding any filename placeholders they configure or import from others before using them. When sharing PhotoShow settings, downloaded images, or generated filenames, users should ensure that no information is disclosed that they do not intend to share.

In particular, filename placeholders imported from third parties should be reviewed carefully before use. Although imported settings do not contain extracted page data themselves, they may be configured to include information from webpages in generated filenames when used on the recipient's device.

By using Image Download filename placeholders, users acknowledge and accept the above risks and agree to use the feature responsibly.

Risks Associated with Enabling “Allow cross-site image loading”

As of version 4.83.0 (released Dec 2, 2025), PhotoShow provides an optional Assistance and Enhancements feature: Allow cross-site image loading (only available in Chrome, Edge, and other Chromium-based browsers).

When enabled (disabled by default), PhotoShow modifies certain response headers of image requests—such as Cross-Origin-Resource-Policy (CORP)—and may adjust additional security-related headers used in XHR or fetch requests. Relaxing these restrictions allows images to load even when the image’s hosting server prevents its content from being accessed by pages on a different origin.

This can improve the image viewing or downloading experience in scenarios where images are sourced from external domains, including various search results pages and sites that aggregate content from multiple origins.

Users should note that relaxing these browser-level protections introduces potential risks, such as:

• Cross-origin data exposure:

Websites or scripts may gain access to image content, or infer information, that would otherwise be blocked by strict CORP or related policies.

• Reduced effectiveness of browser built-in security mechanisms:

Protections related to isolation, controlled resource loading, and origin separation for images and certain requests may no longer function as intended.

• Cross-site tracking or behavioral profiling: 

Malicious websites or extensions might use the increased availability of cross-origin resources to analyse patterns in how the browser loads content, potentially inferring aspects of browsing behaviour.

• Unexpected site behavior:

Some websites might rely on strict security headers for correct operation. Overriding these headers may cause layout issues, loading inconsistencies, or unexpected interactions.

This feature is strictly optional and should be enabled only by users who understand and accept the implications.

Changes to This Policy

We reserve the right to modify this Privacy Policy & Terms of Use at any time. Updates will be published on official channels (e.g., extension store listing, this site, etc.). Continued use of PhotoShow after such changes constitutes your acceptance of the updated terms.