The short version
Parcel Intelligence shows you your own orders, parcels and spending on a map and dashboard. It is built around one rule: your data never leaves your browser. There is no account, no backend server, no analytics and no telemetry. The developer receives nothing.
What the extension reads
While you are signed in to AliExpress in your own browser, the extension reads the order, tracking and returns/refunds information that AliExpress already sends to your browser:
- Your order list: order IDs, dates, sellers, item titles, images, quantities, prices and totals.
- Parcel tracking detail: tracking numbers, carriers, scan events and estimated delivery dates.
- Returns and refunds: case status, reason and refunded amount.
- On product pages, the shipping options shown to you, so a delivery estimate can be displayed next to them.
When you click the toolbar button
The extension can capture an item from a page on any website — the toolbar popup reads the
page’s title, its product image, its price and any tracking number on it, so you can save a
purchase from a store the extension does not sync. This uses Chrome’s activeTab
permission, which means it can only ever read the one tab you are looking at, only at the moment
you click the button, and never in the background. What it reads is shown to you for editing
before anything is saved, and it is saved only to your own browser. No page content is sent
anywhere.
The extension is read-only with respect to your AliExpress account. It never places orders, opens disputes, sends messages, or changes anything in your account.
Where it is stored
Everything is stored locally in your browser profile, using IndexedDB and chrome.storage.local. Nothing is uploaded to the developer or to any third party. Data is not synced between your devices.
Network requests the extension makes
| Destination | Why |
|---|---|
aliexpress.comaliexpress.us | The same order and tracking endpoints your browser already uses, with your own existing session, to refresh your orders, parcels and refunds. |
global.cainiao.com | Public parcel tracking lookups by tracking number, used as a fallback source of scan events. |
server.arcgisonline.com | Map tiles from Esri’s public tile service, to draw the base map. Tile requests contain only the map area being viewed. |
Optional, off by default
These are only ever contacted if you explicitly ask for them, and Chrome asks for the host permission at that moment:
| Destination | Why |
|---|---|
A carrier’s own tracking siteups.com, tools.usps.com, fedex.com, dhl.com, and the others listed in the extension | Only when you click “Read scans from <carrier>” on a parcel. Access is requested for that one carrier, its public tracking page for your tracking number is opened in a background tab, the page is read, and the tab is closed. No carrier API or key is involved and nothing is transmitted — it is the same page the tracking link opens, read for you rather than by you. |
nominatim.openstreetmap.org | Geocoding scan location names that the bundled offline gazetteer does not recognise. Place names only, rate-limited to one request per second, cached permanently. |
open.er-api.com | Exchange rates, refreshed at most weekly, so spend in several currencies can be shown in one. |
api.anthropic.com | Only if you supply your own Anthropic API key: unrecognised carrier scan text, unrecognised location names, and the on-demand “Explain this parcel” button. Your key is stored only in chrome.storage.local, is never synced, and is never sent anywhere except to Anthropic’s API on your behalf. A hard daily call budget applies, defaulting to five calls per day. |
What the developer receives
Nothing. The extension has no backend. No usage data, crash reports, identifiers or order information are collected or transmitted to the developer.
Data sharing and sale
Your data is not sold, rented, shared or transferred to any third party. It is not used for advertising, profiling, creditworthiness or lending decisions, and it is not used for any purpose unrelated to the extension’s single purpose of displaying your own orders and parcels to you.
Your control over the data
- Export. Settings offers a full export of everything stored, as JSON.
- Import. A previously exported file can be restored.
- Delete. A “Wipe everything” button in Settings permanently deletes all locally stored data.
- Uninstall. Removing the extension deletes its storage along with it.
Permissions and why they are needed
| Permission | Purpose |
|---|---|
storage, unlimitedStorage | Stores your order, parcel and scan history locally. Histories of several hundred orders exceed the default quota. |
alarms | Schedules periodic background refreshes of orders and tracking. |
notifications | Notifies you of deliveries, stalled parcels and approaching buyer-protection deadlines. |
scripting | Registers the page script that mirrors AliExpress’s own order and tracking responses, so the extension does not have to scrape rendered HTML. |
cookies | Reads the _m_h5_tk token cookie on aliexpress.com, which AliExpress requires to sign its own API requests when the extension refreshes your orders in the background using your existing session. |
activeTab | Lets the toolbar popup read the page you are looking at, only when you click the button, to capture an item’s image, price and tracking number. |
| Host access to AliExpress and Cainiao | Reading your own order and tracking data, and injecting the delivery-estimate badge on product pages. |
Children
The extension is not directed at children and collects no data from anyone.
Changes to this policy
If this policy changes, the updated version will be published on this page with a new date at the top.
Contact
Questions about this policy can be raised as an issue on the project repository.