What permissions does the extension ask for, and why?

Before you start

• The extension installed and connected: How do I install the extension and connect it?
• A LootSpectrum account: How do I create an account, and can I sign in with Steam?

Step by step

1. Open the Sync page once the extension shows as connected; the step “Let the extension reach Steam” lists both permissions before your browser asks.
2. Browser tabs lets the extension open an inactive Steam tab in the background to check that you are signed in to Steam.
3. steamcommunity.com lets the extension read your inventory history pages and your current CS2 inventory.
4. Click “Grant access” and confirm the prompts your browser shows, tabs first, then steamcommunity.com.
5. When both are confirmed, Steam access in the Readiness list reads “Granted”; the next step is the Steam login check.

Good to know

• The two prompts come one after the other, tabs first, then steamcommunity.com, and only for what is still missing.
• The tab permission is used for one thing: an inactive Steam tab that checks whether you are signed in. The history itself is read by direct requests, without opening tabs.
• steamcommunity.com lets the extension read your inventory history pages and your current CS2 inventory; no other site is touched.
• Your browser words the prompts itself, and the tabs prompt can read more alarming than “Browser tabs”.
• If you decline one, the step stays, a line such as “Permission was not granted.” appears and Steam access keeps reading “Needs your approval”.
• “Or upload what the extension already cached” works without either permission.
• The extension also stores its own data in the browser; that needs no prompt.
• How to withdraw access, and what the extension never reads, is covered in the answer on whether the extension is safe.