Security & Permissions

Last updated: October 17, 2026

Short version: Capitol Tape reads the ticker symbol from the page address or title. It cannot see your brokerage account, balances, positions or orders, and it cannot place trades.

Permissions the extension asks for

Extension permissions and why each is needed
Permission	Why
`storage`	Keeps your watchlist, recent results, the daily lookup count, panel settings and your optional Bargo key on your device.
`alarms`	Runs the hourly watchlist check (Pro) and clears old saved results.
`notifications`	Tells you when a watched ticker gets a new filing or turns Hot (Pro).
Access to `bargo.ai`	Fetches public disclosure data for the ticker on screen.
Runs on TradingView, Robinhood, Webull and Schwab pages	Reads the ticker from the page address or title and draws the panel. No other page content is read.
Firefox only: access to `extensionpay.com`	Lets the payment library check whether you have Pro.

It does not ask for your browsing history, cookies, or access to any other website.

What leaves your browser

The ticker symbol you are viewing, and the tickers on your watchlist, sent to Bargo to get filings.
A check with ExtensionPay of whether this installation has Pro.

No analytics, no ads, no tracking. All code ships inside the extension package; it loads no remote code.

Payments

Pro is bought through ExtensionPay and Stripe on their own pages. Capitol Tape never sees or stores card details.

This website

Served over HTTPS only, with security headers that block framing, content sniffing and scripts from other sites.
The optional sign-in uses Google or GitHub. We never see your password. One cookie keeps you signed in; it is secure and not readable by scripts.

Report a security problem

Email hello@example.com with "Security report" in the subject. Please include steps to reproduce it, and give us a reasonable time to fix it before telling others. We will reply within 5 working days. More detail is in SECURITY.md (opens in a new tab).