Leave Me Alone
A browser extension that stops GoKwik's shopper network from recognising you on stores you only browse. That recognition is why a brand can WhatsApp you after you looked at a product and left. Checkout keeps working.
How it works, in plain words: https://leavemealonee.vercel.app
Why
Many Indian D2C stores (Mamaearth, boAt, Bombay Shaving Company, Plum, mCaffeine and others) embed GoKwik KwikPass. On every page it loads hidden frames from pdp.gokwik.co that read a 365-day GoKwik cookie set on other stores. It hands your phone number to the store you're on, and reports the products you view. GoKwik sells this as "identify up to 30% of visitors, even those who don't sign up", followed by WhatsApp messages.
What it does
It blocks only the parts of GoKwik that identify you:
| What | Blocked address | What it did |
|---|
| Cross-store identity | pdp.gokwik.co/kwikpass/…, pdp.gokwik.co/cart-get-tokens.html | Hidden frames that read GoKwik's cookie and pass your number or login token to the store you're on |
| Device fingerprinting | prd-gfp.gokwik.co, gkx.gokwik.co/kp/api/v1/fp/… | Fingerprint (FingerprintJS) service that recognises a device without cookies |
| Browsing analytics | gkx.gokwik.co/gke/…, sdk.gokwik.co | Sends each product you view to GoKwik for "you were looking at…" follow-ups |
GoKwik's cart and checkout are left alone. When you decide to buy, you type your number at checkout as usual.
- Flags GoKwik stores. The toolbar badge shows how many tracking requests were blocked on the page. The popup says which kinds.
- Pause on this site. Use this when you want to log in with a store's GoKwik OTP login, then resume.
- Forget my GoKwik data. Clears GoKwik's cookies and storage from Chrome: the data stores already use to recognise you. Clicked while you're on a store, it also removes the GoKwik copies that store saved on its own site (your visitor ID, saved phone numbers, login tokens), keeping your cart and the store's own login. Do this once on each store that already messages you. GoKwik's own data is also cleared every time Chrome starts, unless you turn that off; the per-store copies are only cleared when you click the button.
Install (Chrome, Edge or Brave on a computer)
- Add it from the Chrome Web Store. Edge and Brave install it from there too.
- Pin the extension, open it, and click Forget it now to clear GoKwik data from earlier shopping.
Also recommended: Settings → Privacy and security → Third-party cookies → Block third-party cookies. Tested: with this on, GoKwik can't carry one ID between stores.
To run it from this repo instead, open chrome://extensions (or edge://extensions, brave://extensions), turn on Developer mode, click Load unpacked and choose the extension folder.
What it doesn't do
- Stores that already have your number keep it. In WhatsApp, use Stop, Block and Report, and ask the brand and GoKwik ([email protected]) to delete it.
- Typing your number into a GoKwik checkout gives it to that store, which may message you if you leave without buying.
- Other checkout networks (Shopflo, Razorpay Magic Checkout, Shiprocket) aren't covered yet.
- GoKwik can change its addresses at any time. Run the test below to confirm the rules still match.
Test
cd test
npm install
npm run smoke # checks mamaearth.in
npm run smoke -- <product-url> # checks any GoKwik store's product page
The test installs the extension into a throwaway Chrome profile. It checks that the identity, fingerprinting and analytics requests are blocked, that no GoKwik ID cookie is created, that the popup flags the store, and that GoKwik's checkout still opens and asks for a phone number. It also checks pause, resume and forget, including that forgetting on a store removes GoKwik's saved copies while keeping the cart, and that the popup has nothing to block on a site without GoKwik. It never types into a form or places an order. On 10 Oct 2026 it passed 12/12 on mamaearth.in, boat-lifestyle.com and bombayshavingcompany.com.
Set CHROME_PATH if Chrome isn't at the default macOS location.
How it works
extension/rules/gokwik.json: the blocking rules (declarativeNetRequest). Rule 100 is a low-priority allow rule that only records that GoKwik is on the page; it isn't counted on the badge.extension/lib.js: which rule belongs to which category, pause and resume (a dynamic allowAllRequests rule for the site), and data clearing.extension/background.js: sets up the badge and clears GoKwik data at startup when that setting is on.extension/popup.*: the toolbar popup.site/: the website at leavemealonee.vercel.app (plain HTML, CSS and JS). Vercel deploys it from main.
| Permission | Why |
|---|
declarativeNetRequest | Block GoKwik's tracking addresses |
activeTab, scripting | When you open the popup, check whether the page uses GoKwik. When you click "Forget my GoKwik data", remove the GoKwik items that store saved. Nothing runs on pages otherwise. |
storage | Your settings |
browsingData | Clear GoKwik's cookies and storage when you ask, or at startup |
The extension makes no network requests of its own and sends nothing anywhere.
License
MIT. The Anek Latin font in extension/fonts and site/fonts is under the SIL Open Font License (OFL.txt next to it).
