Skip to content
GrabProspect

Extension Privacy Policy

Last updated October 11, 2026

This policy covers the GrabProspect browser extension (“GrabProspect: LinkedIn Sign-in”) for Chrome and Microsoft Edge, including the version on Microsoft Edge Add-ons. The extension has one purpose: to connect the LinkedIn account signed in to your browser to your GrabProspect workspace, when you ask it to. The GrabProspect Privacy Policy covers the GrabProspect app itself.

What the extension reads

  • Your LinkedIn sign-in cookies (such as li_at and JSESSIONID, on linkedin.com only). It reads them to show whether you’re signed in to LinkedIn, and to send them to GrabProspect when you press Allow.
  • Your LinkedIn name, which it asks LinkedIn for so the approval window and the toolbar show which account is signed in. The name stays in the extension unless you press Allow, when it’s shown to you in GrabProspect.
  • GrabProspect addresses you add in Settings, kept in your browser’s extension storage.

While an approval window is waiting for you to sign in to LinkedIn, it notices when LinkedIn’s sign-in cookie appears, so the window can carry on by itself. It does not read your browsing history, other websites’ cookies, LinkedIn messages, contacts or any page content.

What it sends, and where

  • Only when you press Allow in the GrabProspect approval window, which shows the GrabProspect address, the profile and the LinkedIn account first.
  • Only your linkedin.com cookies, and only to the GrabProspect page that asked: app.grabprospect.com, or an address you added yourself. Pages on any other website get nothing.
  • GrabProspect checks the session with LinkedIn and keeps it in that LinkedIn profile’s browser on the GrabProspect server, so it can act for that account as you direct. Signing out of LinkedIn in your browser ends that session too.

The extension sends nothing to us or anyone else on its own: no analytics, no tracking, no advertising.

What it never does

  • It never sells or shares your data, and never uses it for advertising or creditworthiness.
  • It never sends your cookies without your approval in its own window.
  • It never collects your LinkedIn password.

Permissions, and why

  • cookies and linkedin.com access: to read your LinkedIn sign-in and the account name.
  • storage: to remember the GrabProspect addresses you add and the request waiting for your approval.
  • access to app.grabprospect.com and scripting: so GrabProspect pages can ask for approval. Right after the extension is installed or updated, it adds its small page script to GrabProspect tabs that are already open, so you don’t have to reload them. On a first install it also opens GrabProspect’s Profiles page once, to show you where to connect.
  • access to an address you add: to let your own GrabProspect server ask for approval, only after you add it in Settings.
  • alarms: to close approval requests nobody answered after five minutes.

The toolbar button

Clicking the extension’s icon shows whether you’re signed in to LinkedIn and as whom. Its “Add to GrabProspect” button only opens GrabProspect’s Profiles page; nothing is sent until you press Allow in the approval window, as above.

Your control

You can cancel any request, remove added addresses in Settings, or remove the extension at any time from your browser’s extensions page. To remove a LinkedIn session from GrabProspect, sign out of LinkedIn in your browser or remove the profile in GrabProspect. Questions go to contact@grabprospect.com.