Domain harvesting (removed)

Domain harvesting is gone. It was removed on 5 September 2026, the code that fed it was deleted, and the rows it had already written were purged. This page stays so that a link from an older document, an evaluation note or a support thread lands on an explanation rather than a 404.

What it used to do

The extension reported every navigation as an activity event carrying the URL and the page title. The backend collected the hostnames that belonged to no registered organization into an unregistered_domains table, and the Backoffice listed them as candidates for registration.

That is a record of where a person browses, kept by a product they installed to help them fill in a form. No shipped feature needed it, and nobody had agreed to it.

What replaced it

Nothing collects browsing now. Appilot records what a person does with Appilot: opening the panel, asking a question, letting the assistant carry out an action.

Two mechanisms cover what harvesting was supposed to be for.

The coverage check. On each page load the extension asks whether the site is one the user's organization has configured. It sends the origin, https://host, with no path, query or fragment. The answer decides whether the assistant has anything to offer. Neither the request nor the answer is stored, and an uncovered hostname is written nowhere.

Coverage requests. When a user wants Appilot on a site it does not cover yet, they press a button that posts to POST /domain/coverage-request. Demand now arrives because somebody asked for it, not because the product watched them.

What was removed, concretely

Removed	Where
unregistered_domains table and its Backoffice listing	migration organizations/020_drop_unregistered_domains.sql
Rows already written for the retired event types, and the user_context rows that carried last_url and last_title per domain	migration users/011_purge_retired_activity_metrics.sql
The background tab listener that sent page_visit, and search_performed carrying the query read off a search engine URL	extension TabMonitor, deleted

page_visit, search_performed, form_interaction and domain_visit are listed in RETIRED_ACTIVITY_EVENT_TYPES. POST /activity answers 410 ACTIVITY_TYPE_RETIRED for them and the activity service refuses them again, so an older extension build still installed on someone's machine cannot keep writing. They remain in ACTIVITY_EVENT_TYPES only so that historical rows still render.

Registering a domain

Register domains yourself, in the Backoffice. See Domain configuration.