VERIDICA extension privacy policy
Last updated: 25 October 2026
Privacy policy for the VERIDICA 1.0 extension for Microsoft Edge and Google Chrome. Publisher: Nova Forensics, Via dei Gladioli 26, 09045 Quartu Sant’Elena (CA), Italy, VAT IT03892050927 — info@veridica.it.
What the extension does
VERIDICA acquires web content (pages, social posts, WhatsApp Web and Telegram Web conversations) that the user is already viewing with their own session, computes SHA-256 hashes of the preserved files and produces a PDF report. Its single purpose is forensic acquisition of digital evidence by the user.
Data handled and where it goes
| Data | Where it is written | Sent to us or third parties? |
|---|---|---|
| Content of pages, posts, messages and attachments the user decides to acquire | Only the Downloads folder of the user’s computer | No |
| Operator settings (name, organisation, ID, case number), licence, trial counter | Browser local storage (chrome.storage.local). Only the licence ledger — installation identifier (random, not linked to personal data), trial counter, credits used, clock — is also copied to the browser’s synced storage (chrome.storage.sync), which the browser replicates across the user’s devices only if profile sync is enabled; the publisher has no access to it. | No |
| Account declared for the acquisition (optional) | Local settings; printed in reports | No |
| History, credentials, cookies, other tabs’ data | Not read, not stored | No |
Permissions and why
- activeTab, scripting: access only to the tab where the user runs a command, at that moment.
- downloads: writing evidence files and reports to the Downloads folder.
- storage: settings and licence, locally; licence ledger (installation identifier, counters) also in the browser’s synced storage.
- pageCapture, tabCapture, offscreen: MHTML export, tab video recording and PDF generation.
- alarms, notifications: keeping long acquisitions alive and notifying completion.
- debugger: used only during a page acquisition, on the acquired tab and for a few seconds, to read from the browser the TLS certificate presented by the server, the IP address and TLS session parameters required in forensic reports. It does not read other tabs.
- Optional host access (TikTok, Instagram, Facebook, YouTube, X, LinkedIn, Threads, WhatsApp Web, Telegram Web and their CDNs): requested at first use on each platform to download media with the user’s session; revocable at any time in browser settings.
Network connections
The extension only contacts the platforms being acquired and, only if the user enables those options, an RFC 3161 timestamping service or the public OpenTimestamps calendars, which receive only the file hash, never its content. With the user-enabled “External sources” option, the extension also queries public DNS over HTTPS (cloudflare-dns.com, dns.google), RDAP (rdap.org and regional registries) and Certificate Transparency (crt.sh) services, sending only the domain name or IP address of the acquired site. For every acquired page the extension performs a second request to the page itself to save the server’s original response. No request goes to the publisher’s servers. No telemetry, no usage analytics, no advertising.
Licences
Licence keys are verified locally by cryptographic signature; activation transmits no data.
Limited Use
Use of data is limited to the stated purpose and complies with Chrome Web Store and Microsoft Edge Add-ons policies, including Limited Use requirements: no data is sold, transferred, used for advertising or creditworthiness.
Retention, deletion, contact
Since nothing is transmitted to us, we retain nothing collected by the extension. Local data is deleted by removing the Downloads/VERIDICA folder and uninstalling the extension. Questions: info@veridica.it.
Navigable copy of social media. While acquiring a social post the extension registers a temporary read-only hook on the acquired site only (removed when the acquisition ends) to read the video file addresses that the platform declares to the page; media files are downloaded from those addresses with the user’s own session and preserved with hashes in the case folder. On YouTube, which does not serve the video as a file, the video is preserved by recording the tab playback (tabCapture or the browser’s standard picker), with a visible notice to the operator. None of these steps contacts Nova Forensics or any third party other than the acquired platform.