Oak Donut Security
Last updated: August 25, 2026 Published by Kalidonis LLC
Security summary
Oak Donut treats every captured webpage as potentially sensitive. The currently released extension performs screenshot capture and export locally in the browser. It does not upload screenshot pixels to Kalidonis LLC, contain advertising or analytics SDKs, or load remote executable code.
Local-processing boundary
- Capture begins only after a user invokes Oak Donut on the active tab.
- The page controller measures, scrolls, checks, and restores the selected webpage.
- Browser screenshots are assembled in temporary extension memory.
- PNG and PDF files are generated locally.
- Downloads begin only after a user action.
- Screenshot pixels are not written to Oak Donut account storage or a Kalidonis capture-processing server.
Downloaded files are thereafter governed by the user’s device, browser, backup, synchronization, sharing, and organizational security controls.
Permission model
Oak Donut uses narrow browser permissions for user-facing functions:
| Permission | Security purpose |
|---|---|
activeTab | Limits normal capture access to the page selected through the extension action. |
contextMenus | Adds one right-click menu item for area capture; it grants no page access by itself. |
scripting | Runs the packaged capture controller only when required, and the area picker only after the menu item is chosen. |
downloads | Saves requested PNG, PDF, CSV, and Capture Report outputs without uploading them to a server. |
storage | Retains local preferences, signed licensing state, and one bounded metadata-only Site Batch recovery checkpoint; reads organization settings supplied through browser-managed policy. |
Features that require website discovery will request optional HTTP/HTTPS access only for the domain entered by the user. Area capture inside a frame embedded from another website requests access to that frame's website only. Oak Donut does not request permanent required access to every website for ordinary capture.
Defensive controls
Oak Donut’s development and validation process includes controls intended to:
- prohibit remote executable code and dynamic code evaluation;
- reject unexpected or unnecessarily broad manifest permissions;
- verify the expected tab, window, URL, and page identity during capture;
- enforce browser screenshot throttling and bounded capture dimensions;
- bound temporary encoded-section and working-pixel memory, reject unsafe output early, and release image memory on failures;
- limit retries to allowlisted transient capture failures and avoid retrying authorization, permission, memory, or download failures;
- detect certain blank, unstable, redirected, or changing captures;
- normalize filenames and restrict configured downloads to a safe relative folder;
- restore page styles and scroll position after capture;
- revalidate imported domain manifests before use; and
- produce local SHA-256 integrity evidence for supported exports.
An integrity record is a Oak Donut self-attestation and not an independent signature, timestamp authority, forensic certification, or guarantee of evidentiary admissibility.
Data minimization
The current Free extension has no end-user account system, payment collection, behavioral analytics, advertising, or server-side screenshot history. Structural quality and WCAG preflight checks return generic status information rather than exporting page text or form values.
The optional Diagnostics action creates a local, user-reviewable plain-text file. Its schema allowlists generic versions, feature state, and error codes and excludes arbitrary error messages, URLs, captured content, filenames, browsing history, credentials, license data, and organization identifiers. The extension does not upload the file.
Site Batch can retain one metadata-only active/interrupted job for up to 24 hours so a user can resume remaining URLs or export partial results. The allowlisted checkpoint contains URLs, sanitized settings, state, attempts, and Capture Records—not screenshot pixels or page content—and is cleared on completion, intentional cancellation, expiry, corruption, or user discard.
Oak Donut Pro is currently marked Coming Soon. Its packaged licensing code is fail-closed unless it receives a valid Kalidonis-signed organization entitlement. The planned licensing service processes organization and subscription state only and is designed never to receive screenshots, page URLs, page text, CSV manifests, or accessibility findings. Paid activation will remain disabled until the entitlement service, billing lifecycle, legal disclosures, and production controls complete a separate review. Payment-card entry will be handled by Stripe rather than the extension.
Secure use recommendations
- Install Oak Donut only from an official Kalidonis LLC marketplace listing.
- Keep the browser and extension updated.
- Review requested permissions when installing or updating.
- Treat downloaded captures as sensitively as the source webpage.
- Store confidential captures only in approved organizational locations.
- Redact personal or regulated information before sharing a capture.
- Remove Oak Donut if it is no longer needed or permitted by organizational policy.
Reporting a vulnerability
Report suspected Oak Donut vulnerabilities privately through the Kalidonis LLC contact page and identify the request as Oak Donut Security.
Include, when safe to do so:
- the affected Oak Donut version and browser;
- a concise description of the issue and expected impact;
- reproducible steps using non-sensitive test data; and
- any suggested remediation or supporting screenshots.
Do not include passwords, authentication tokens, payment information, customer data, or confidential webpage captures. Do not test against accounts, websites, or data you do not own or have explicit permission to assess. Avoid public disclosure while Kalidonis LLC investigates and addresses a reported issue.
Kalidonis LLC does not currently operate a paid vulnerability-reward program. Reports are reviewed on a reasonable-efforts basis.
Supported versions
Security fixes are delivered through extension updates. Users should run the newest version available from the applicable official marketplace. Older, unpacked, modified, or unofficial distributions may not receive support.
No absolute guarantee
No software or security process can eliminate all risk. This page describes the intended security design and current controls; it is not a warranty that Oak Donut is free of vulnerabilities or compatible with every website and environment.
Name-change notice
The popup also sends a BRAND_TRANSITION message containing only type and operation (status, seen, or dismiss). The worker accepts it only from this extension’s popup URL. It stores the transition ID, upgrade eligibility, first-display timestamp and dismissal timestamp in local extension storage. This record is never transmitted and contains no page or capture data. The worker uses it only to select the toolbar icon and expire the popup notice. Existing capture-status badges and titles are independent.