When you install Loupely Lens from the Chrome Web Store, Chrome may show a warning about the extension’s permissions. The language Chrome uses is broad, and it can read as more alarming than what Lens actually does. Here’s what the warning means and why those permissions are needed.
The warning you might see #
Chrome warns that Loupely Lens can “read and change all your data on websites you visit” and has access to the debugger. Both of those are accurate descriptions of the permissions in the technical sense. Neither means what it sounds like in plain usage.
Why Lens needs the debugger permission #
The debugger permission lets Lens access the Chrome DevTools Protocol (CDP), which is how Chrome exposes full CSS Layer information to extensions. Some stylesheets on some sites load cross-origin (from a different domain than the page), and the standard CSS reading API can’t fully resolve their layer data. CDP fills that gap.
Lens uses the debugger permission only during an active capture, only on the element you clicked, and only to read CSS Cascade data. It doesn’t execute code on pages, doesn’t run in the background, and doesn’t transmit anything through the debugger channel except CSS rule information.
Why Lens needs active tab access #
To read the CSS state of an element, Lens needs access to the page where that element lives. “Read and change all your data” is Chrome’s standard phrasing for active tab access. In practice, Lens reads CSS properties on the element you click. It doesn’t read page content, form data, passwords, or anything outside the element’s CSS Cascade.
What Lens doesn’t do with these permissions #
- It doesn’t monitor your browsing or read pages you haven’t explicitly activated it on.
- It doesn’t run in the background between captures.
- It doesn’t collect or transmit data from the page beyond the CSS of elements you click.
- It doesn’t modify any page content or inject anything that persists after you close the popup.
How to proceed #
Click “Add extension” to continue with the installation. If you have questions about what Lens does with captured data, see Loupely Lens Data Handling and Chrome Extension Permissions Explained.