Ghost Add-Ons: A Five-Minute Tidy-Up for Your Browser's Back Room

Most of us treat the browser like a kitchen drawer. Something awkward needs doing — squeezing a PDF into a readable shape, clipping a voucher, checking a parcel — and we install a small helper to get it done. Then we shut the drawer and forget. Years later, the drawer is full of odd little tools, and a few of them still have permission to look over your shoulder whenever you're online.

Browser extensions are genuinely useful. The problem isn't that they exist; it's that they pile up, their permissions are rarely reviewed, and the toolbar hides them behind a puzzle-piece icon. A five-minute clear-out once in a while is a reasonable trade for keeping the useful ones around.

Why the back room gets messy

An extension is a small program that runs inside your browser. To do its job, it often asks for access to the pages you visit. Some only need to work on one site; others ask to read and change data on every site you open. That second permission is broad by design. It means the extension can see your banking pages, your work webmail, your NHS login screens and your council tax portal, not just the recipe site you installed it for.

That isn't a reason to panic. It is a reason to look at the list now and then, the same way you'd glance at which apps have access to your phone's location. Under UK data protection law you have rights over your personal data, but those rights are easier to exercise when you know who's holding the keys.

What the permission lines actually mean

When you click into an extension's details, the wording can feel like it was written by a committee. A few phrases are worth recognising:

• "Read and change all your data on all websites" — the broadest setting. The extension can see page content, forms and sometimes what you type. Fine for a password manager you trust; overkill for a font changer.
• "On specific sites" — the extension only runs where you allow it. Much easier to live with.
• "On click" — the extension sits idle until you click its icon. Good for occasional tools such as screenshot or colour-picking add-ons.
• "Read your browsing history" — it can see where you've been, not just where you are.
• "Manage your downloads" — it can see and alter files you save.

A useful rule of thumb: match the permission to the job. A tab-suspender needs to see your tabs. A grammar checker needs to see text boxes. A voucher finder that wants to read every page on every site is asking for a lot more than the job requires.

The five-minute check, browser by browser

You don't need any special software. Each of the major browsers keeps a list, and it's usually two or three clicks away.

Chrome

Open the three-dot menu, go to Extensions → Manage Extensions, or type [chrome](https://en.wikipedia.org/wiki/Google_Chrome)://extensions into the address bar. Click Details on any extension to see its site access and permissions. Look for the Site access menu — you can often switch it from "On all sites" to "On click" or a specific list. Chrome on Android doesn't support extensions, so the desktop is where this happens.

Edge

Edge uses the same Chromium plumbing. Go to Extensions → Manage extensions, or type edge://extensions. The layout is slightly different, but the Details and Site access controls work in much the same way. If your laptop is managed by an employer, some extensions may be locked in place; that's a conversation for IT, not a reason to start removing things blindly.

Firefox

Open the menu and choose Add-ons and themes, or type about:addons, then select Extensions. Click an add-on and look at its Permissions tab. Firefox shows what each one can access and whether it runs in private windows. Site access controls vary by add-on, but where a setting is offered, use it.

Safari

On a Mac, go to Safari → Settings → Extensions. On an iPhone or iPad, open Settings → Safari → Extensions. Each extension has a toggle, and Safari usually lets you choose between allowing access on every website, asking each time, or denying it. "Ask" is a sensible default for anything you use only occasionally.

Keep, restrict or bin

Once the list is in front of you, ask four questions about each entry. Do I recognise this? Did I use it in the last month? Does it need the access it's asking for? Is there a built-in browser feature that does the same job now?

If you can't answer the first two confidently, remove it. Reinstalling an extension takes less time than deciding whether to keep it. If you need it but rarely, restrict it to on-click or specific sites. If two extensions do the same thing — two ad blockers, two screenshot tools — pick one. And if you see something you don't remember installing at all, remove it and then change your browser account password, just in case.

Don't forget the browser you use for one specific thing — the secondary profile for online shopping, or the one you keep logged into a work tool. Extensions live per profile, so the clutter can be hiding there too.

The handover problem

One of the quieter risks with extensions is a change of ownership. A small, well-liked add-on gets bought by a company you've never heard of. A few weeks later, an update arrives with new permissions and a slightly different privacy policy. The extension hasn't been "hacked" in the traditional sense; it has simply changed hands, and the new owner has different ideas about how to make money.

The tell-tale signs are in the store listing. Check the Developer or Offered by line, the Last updated date, and the privacy policy link. Read the most recent reviews rather than the highest-rated ones, and search the extension's name alongside the word "acquired" if something feels off. If the browser asks you to approve new permissions after an update, read the prompt properly rather than clicking through it.

A habit worth keeping

Pick a recurring moment — the first Monday of the month, or whenever a bill lands — and spend two minutes on the extensions page. Scan the list, remove anything you can't justify, and update the browser while you're there. It's a small bit of housekeeping, but it keeps the back room from filling up with things you'd never invite in again.