Privacy Policy – API Request Sniffer

Last updated: July 2025

API Request Sniffer is a Chrome browser extension designed to help developers inspect, analyze, and debug API traffic (XHR and Fetch requests) made by webpages they are actively working on. This policy explains what data the extension accesses, how it is used, and your rights as a user.

1. Single Purpose

The sole purpose of this extension is to capture and display API requests (XHR and Fetch) made by the currently open webpage in a developer-friendly UI. It helps developers inspect, analyze, and compare API traffic for debugging and development workflows.

2. Data We Access

The extension accesses the following data only on the active tab when you explicitly activate it:

• HTTP request URLs
• Request headers and methods (GET, POST, etc.)
• Request and response bodies
• HTTP status codes and response times

3. How Data Is Stored

All captured data is stored locally in your browser using Chrome's built-in storage API. This includes:

• Request history
• Saved templates
• Comparison data
• User preferences

No data is ever transmitted to any external server. Everything stays on your device.

4. Permissions Used

• activeTab: Used to inspect network requests on the tab you are currently viewing. The extension only activates when you explicitly click the extension icon — it does not monitor background tabs or passive browsing.
• webRequest: Required to intercept and log API requests (XHR and Fetch) made by the active tab, so request details can be displayed in the extension UI.
• scripting: Used to inject content scripts that intercept API requests and communicate with the extension's background and UI components.
• tabs: Used to identify the currently active tab and ensure content scripts are injected only where needed.
• storage: Used to save request history, templates, preferences, and comparison data locally in the browser.
• Host permissions: Required to monitor API requests on user-specified websites. The extension only operates on pages where the user activates it and does not modify page content.

5. Data Sharing

We do not share, sell, or transmit any data to third parties. All data remains local to your browser session.

6. No Tracking or Analytics

This extension does not include any tracking, analytics, or telemetry. We do not collect usage statistics, crash reports, or any personally identifiable information.

7. User Control

You have full control over your data:

• You can clear all stored data at any time from the extension settings.
• Uninstalling the extension removes all locally stored data.
• The extension only activates on explicit user action.

8. Remote Code

This extension does not use any remotely hosted code. All code is bundled and distributed within the extension package itself.

9. Changes to This Policy

If this privacy policy is updated, the new version will be published at this same URL. Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions or concerns about this privacy policy, please open an issue on our GitHub repository:
github.com/gajjardarshithasmukhbhai/Api-Sniffer-Chrome-Extension-Policy/issues