Privacy Policy
Effective date: April 1, 2026
Request Buddy is a Chrome extension built for developers to inspect cookies, storage, JWT tokens, and HTTP headers. This policy explains what data the extension handles and how.
Data that stays on your device
All cookie, localStorage, sessionStorage, and HTTP header data is read and displayed locally within the extension popup. None of this data is transmitted to any external server. Custom header injection rules are stored in Chrome's local storage on your device.
Analytics
Request Buddy collects anonymous usage analytics via Google Analytics 4 (Measurement Protocol) to help improve the extension. The following events are collected:
- Install event — fired once when the extension is first installed
- Error events — fired when an unhandled error occurs in the background service worker
A randomly generated client ID (UUID) is stored locally and sent with analytics events. This ID is not tied to your identity. Session IDs are derived from timestamps. No browsing history, page content, cookies, tokens, or header data is ever included in analytics.
Permissions explained
| Permission | Why it's needed |
|---|---|
| cookies | Read cookies for the active tab to display in the Cookies panel |
| activeTab | Access the current tab's URL to scope cookie and header lookups |
| storage | Store extension settings, header injection rules, and the analytics client ID locally |
| webRequest | Capture HTTP request and response headers for the Headers panel |
| scripting | Inject a content script to read localStorage and sessionStorage from the active page |
| declarativeNetRequest | Apply custom header injection rules to matching URL patterns |
| host_permissions (<all_urls>) | Required to capture headers and inject custom headers on any website you visit |
No personal data
Request Buddy does not collect, store, or transmit any personally identifiable information. No names, email addresses, browsing history, or page content is ever sent anywhere.
Third-party services
Google Analytics 4 receives anonymous event data only (event name, session ID, client ID). See Google's Privacy Policy for details on how Google handles this data.
Changes to this policy
If this privacy policy changes, the updated version will be posted on this page with a new effective date.
Contact
Questions about this privacy policy? Reach out at contact@request-buddy-ce.web.app.