Last updated: 29 August 2026

Snifff is a browser extension that rates the ingredient list of a cosmetic product against EU and Indian cosmetic regulation while you are looking at the product page. This policy describes exactly what the extension sends, what is stored, and who else sees it.

In short: Snifff has no accounts and no logins. It never asks who you are and has no way to find out. Nothing it stores can be traced back to a person, a device, or a browsing session.

Where Snifff runs

The extension loads on nykaa.com and nowhere else. It is not installed into, and cannot read, any other website you visit.

Besides the Nykaa page you are already looking at, Snifff can reach exactly one server: the Snifff scoring service, hosted on Supabase. There is no other network destination in the extension.

What leaves your browser

When you open a Nykaa product page, the extension reads the listing and sends the following to the Snifff scoring service, anonymously, so the product can be scored:

• The ingredient list printed on the page — or, if the list is only available as an image, the text you choose to paste in yourself.
• The product title, the marketing claims text, and the breadcrumb category trail. These decide which regulatory rules apply — a rinse-off shampoo is judged against different thresholds than a leave-on face serum.
• The shade or variant currently selected, so switching shades rescores the right product.
• Only the product-ID part of the web address — for example /p/12345. The rest of the URL, including the product slug, the query string, and anything after #, never leaves your browser.
• The image URLs shown on the listing.
• The retailer name and a version number for the extension's data format.

These requests carry no name, no email address, no account, no advertising identifier, no device identifier, and no session identifier — because none of those exist anywhere in Snifff.

What never leaves your browser

• Anything identifying you. Snifff has no sign-up, no profile, and no login.
• Your browsing history, your other tabs, your bookmarks, or your form data.
• Cookies. Snifff neither sets nor reads any.
• Anything at all from a website other than Nykaa. The extension is not loaded on other sites, so it cannot see them.