SEO Bandwagon

Check the on-page SEO of any page in one click: a score with fixes, link and indexability checks, and more.

SEO Bandwagon SEO Chrome Extension reviews the on-page SEO of the site you have open, right in your browser. One click gives you the findings, and no account is needed. ON-PAGE ANALYSIS A score from 0 to 100 with a letter grade, four sub-scores and a short list of fixes. You also see a preview of how the listing could look on Google, loading and layout speed as your browser measured it, the heading outline, links and images, and the technology behind the site. LINK CHECK On request, tests every link, groups them by status code and highlights the broken ones where they sit. INDEXABILITY Shows the redirects that led to the URL and whether search engines may index it, with a plain yes or no. You can trace another address without leaving. HREFLANG Finds mistakes in language and region tags and, when you ask, confirms that each alternate version links back. RENDERING Compares the HTML the server sent with what your browser displayed, so you can spot what scripts changed. You can also reload the tab the way a crawler requests it. STRUCTURED DATA Reads the structured data on the page and tells you what is missing before Google can use it. A local business without a phone number, or a product without an offer, is flagged with the exact field to add, and complete items show the rich result they qualify for. SEARCH RESULTS OVERLAY Adds a small stats bar under each organic listing on Google and a toolbar to copy or export what you see. Exports stay on your computer, and only domain names are looked up, never your query. SEARCH CONSOLE HELPERS In a performance report, opens any query on Google in one click and, when you compare two date ranges, puts the percent change beside each number. PANELS AND APPEARANCE A side panel keeps the findings open while you work. Choose Night, Day or Auto; two matching Chrome themes are available separately. EXPORTS AND TOOLS Every section exports a CSV you save yourself, and a right-click menu opens the current URL in common testing and archive tools. OPTIONAL ACCOUNT Connect a free SEO Bandwagon account to keep your analyses, review local business listings and manage outreach. While reviewing a listing you can save a screenshot of the whole page as proof, kept on your computer. Nothing is sent until you connect and turn on sending in Settings. ``` **Privacy policy**: https://seobandwagon.com/privacy --- ## 3. Permission justifications One paragraph per permission, written for a Chrome Web Store reviewer. **`activeTab`** — reads the current tab's URL and title only when you click the toolbar icon or use the keyboard shortcut, and lets the popup take a screenshot of that tab when you ask for proof of a business listing (the Citations tab's SCREENSHOT button). Never used passively in the background. **`storage`** — saves your page analyses locally, caches API responses, and stores your API key and settings on your own device. **`contextMenus`** — adds the right-click "Analyze this page" / "Analyze linked page" / "Count words & characters" entries and the "SEO Bandwagon tools" submenu. Each item only opens a new tab or runs the page analysis; nothing runs without you choosing a menu item. **`scripting`** — injects a script into the active tab only when you ask for that action: the page-analysis script for an analysis, a reader for the business name, address and phone number when you click Check NAP, and, when you take a full-page proof screenshot, a small helper that scrolls the page one screen at a time and puts it back afterwards. Not used to inject anything into any other tab. **`sidePanel`** — powers the Link Building and Citations side panel. **`tabs`** — reads the active tab's URL to open dashboard links in new tabs, and watches for a tab finishing a page load so the background service worker can match its URL against a bundled list of local-SEO directory hostnames and paint a small toolbar badge when there's a match. That match is a local string comparison only; the URL itself is never sent anywhere for it. **`alarms`** — runs a 15-minute background timer that retries any capture that failed to sync to your account. Does nothing when no account is connected. **`webRequest`** — observes top-level navigations in every open tab (a fixed listener filter matching main-frame requests only), buffering each tab's last 25 redirect/status/response-header events in `chrome.storage.session`. Only the buffer for the tab you currently have the popup open on is ever read — by the Indexability panel — and it's cleared when that tab closes, the browser restarts, or the optional permission below is revoked. It is observe-only: it never blocks, redirects, or modifies a request or response. It fires on nothing at all unless you've separately granted the optional `<all_urls>` permission below, and it never reads a response body. **`webNavigation`** — detects client-side (JavaScript) redirects for the same Indexability panel, and notices when a page finishes reloading so the "Reload to capture" button can re-check it. Also observe-only. **`declarativeNetRequestWithHostAccess`** — used only for the Rendering section's "View as" option. Choosing a preset other than Default installs one session-scoped rule that rewrites the outgoing User-Agent header for requests from exactly the tab you're on; the rule is removed automatically the moment you switch back to Default or close that tab. No rule is ever installed until you pick a preset, and the extension ships with no static rulesets at all — every rule is created and torn down at runtime, per tab. **`host_permissions`: `https://seobandwagon.com/*`** — the only host the extension talks to on your behalf: your own analyses, citation checks, and link-building data, when an account is connected. **`optional_host_permissions`: `http://localhost/*`, `http://127.0.0.1/*`** — requested only if you point the Options page's Advanced API URL setting at a local development server. Never requested otherwise. **`optional_host_permissions`: `<all_urls>` (optional, requested on first use)** — never requested at install. Requested only when you click "Allow access to check other sites" in the Link Check, Indexability, Hreflang, or Rendering section. The consent text shown at request time, verbatim (`ALL_URLS_REASON` in `src/lib/perms.js`): > To check links, hreflang alternates and redirects, and to compare a page's > raw HTML with what your browser rendered, the extension has to look at > pages on other sites from your browser: it fetches them without cookies, > and when you ask it to trace a URL it opens that URL in a background tab > like any normal visit. The "View as" option uses the same access to change > the User-Agent header on requests from the current tab only, until you > switch it off or close the tab. Nothing it sees on those sites is sent to > SEO Bandwagon. You can revoke this at any time from the extensions page. **Content-script match on Google Search Console** (`https://search.google.com/search-console/*`, pre-existing since 1.5.1) — adds two small "open in Google Search" icons to each row of a Performance report's Queries tab, and, when a report compares two date ranges, small percent-change badges on the metric cards and inside each row's Difference cell. Everything here reads the report table already rendered on the page; nothing is fetched or sent anywhere. **Content-script match on Google's own results pages** (`https://www.google.com/search*` and the same path on nine other Google TLDs) — this is a declared content-script match, not a host permission, so it is granted at install like any other content script rather than requested at first use. We recognize this widens the install-time permission warning to cover 10 Google search hosts, on top of the search.google.com and seobandwagon.com access the extension already has, and justify it plainly: the script only reads the organic results already rendered on the page, sends nothing but the bare domain names of those results to our own API (never the search query, never a title or snippet), and is additive-only — it appends a small stats bar and a toolbar, and never hides, moves, covers, or restyles any existing content, including ads. Nothing is fetched from Google by the extension itself; the stats lookup goes through our own background service worker to our own API. **`web_accessible_resources`** — not present in this manifest. `src/history/ history.html` (the capture-history page) is only ever opened by `chrome.tabs.create(chrome.runtime.getURL(...))` from the extension's own Options page (`src/options/options.js`) — a full-tab navigation between two of the extension's own pages, which Chrome always allows regardless of this key. No web page and no content script references it, so declaring it web-accessible would only widen exposure for no purpose; it has been removed rather than narrowed. **`externally_connectable`** (`https://seobandwagon.com/*`) — lets the "Connect Chrome extension" button on the seobandwagon.com dashboard message the extension directly (`chrome.runtime.onMessageExternal`) to hand it a freshly minted API key, which the extension then verifies the same way a key pasted into Options is verified. No other site can message the extension this way. --- ## 4. Single-purpose statement SEO Bandwagon analyses the SEO signals of the page you are viewing and syncs that analysis — and the local-SEO citation and outreach records derived from it — to the user's own SEO Bandwagon account. --- ## 5. Data-use disclosures (Privacy tab checkboxes) Chrome's Privacy tab asks for a yes/no against nine data categories. Ours, with the reasoning behind each: - **Personally identifiable information — No.** A synced capture carries the page URL and its extracted metadata — structured-data blocks are reduced to their type and property names, never values — not anything identifying the person using the extension. The user's own SEO Bandwagon account email is held server-side by seobandwagon.com; the extension never collects it. - **Health information — No.** - **Financial and payment information — No.** - **Authentication information — Yes.** The user's SEO Bandwagon API key is stored locally (`chrome.storage`) and sent as a Bearer header to `seobandwagon.com` only — never to any other host, never to a page being analyzed. - **Personal communications — No.** - **Location — No.** - **Web history — Yes.** Each synced capture carries the URL and timestamp of a page the user chose to analyze. Separately, the results-overlay lookup sends the bare domain names of search results currently displayed on a Google results page — domains shown, not a browsing history and not pages visited. - **User activity — No.** - **Website content — Yes.** Extracted metadata of the pages a user chooses to analyze (title, meta tags, headings, links, images, structured-data type and property names, technical facts). Proof screenshots are saved to the user's own device as a PNG download; the extension never uploads them. A user with the data-collection setting off sends nothing but the bare-domain overlay lookup described above; a signed-out user (no API key configured) sends nothing at all. **Certifications** — This data is not sold to third parties. It is not used for purposes unrelated to the extension's stated SEO-analysis and account-sync functionality. It is not used to determine creditworthiness or for lending purposes. **Privacy policy**: https://seobandwagon.com/privacy --- ## 6. What's new in 1.7.1 (release notes, ≤ 10 lines) ``` - Full-page proof screenshots: in the Citations tab, SCREENSHOT now saves the whole page as one image, with pinned headers and cookie banners shown once. "Visible area only" keeps the one-screen capture. - Very long pages are captured from the top and labelled with how much was included; pages that scroll inside a panel save the visible area. - The results export now includes each result's description, date, rating and breadcrumb. ``` --- ## 7. Reviewer test notes No account is required to exercise every permission-bearing feature below. Full-page proof screenshots (Citations tab) need a connected account; they use only `activeTab` and `scripting`, which the features below also exercise. - **Link Check**: open the popup on any page with links, expand "Link Check," click "Check N links." Click "Allow access to check other sites" first if prompted — this is the optional `<all_urls>` grant. - **Indexability**: open the popup on any page — the panel populates as soon as the optional permission above is granted, then reload the page (or click "Reload to capture") — HTTP signals are only recorded on a navigation. To test "Trace another URL," type any URL into the trace field and submit. - **Hreflang**: open the popup on a page with `hreflang` tags (or any page — the tag table renders even with zero tags). "Check return tags" needs the same optional permission. - **Rendering → "View as"**: open the popup on any page, expand "Rendering," choose a preset other than Default from the dropdown. The current tab reloads under that User-Agent; switch back to Default to remove it. - **Google results overlay**: search anything on google.com. Signed out (no API key configured), each result's stats bar shows "Connect your account" and does not retry. - An API key (free to create at seobandwagon.com) is only needed to see real stats numbers in the overlay and to sync captures/citations/link-building data — every feature above works fully signed out.