extension.reportSecurity
extension.report is built for first-party extension telemetry: minimal client data, durable ingestion, and transparent self-hostable infrastructure.
Data collected
Extension lifecycle events, installation ids, versions, country-level geo and optional owner-defined events.
Data avoided
No cookies in the SDK, no raw IP stored for analytics, no browsing history collection.
Transport
Events are sent over HTTPS and queued durably before analytics processing.
Self-hosting
The production shape is documented: web, workers, SSE gateway, Postgres, Dragonfly and ClickHouse.
Report security issues at web@amorem.com. Operational setup is documented in the docs.