xhrprivacypolicy

Privacy Policy for XHR Viewer

Last Updated: February 14, 2026

Contact: to@allahabadi.dev

Introduction

XHR Viewer (“the Extension”) is a browser extension designed to help developers monitor and debug XHR (XMLHttpRequest) and Fetch API requests in real-time. This privacy policy explains how the Extension handles your data.

Data Collection

What We Collect

The Extension captures the following data locally on your device only:

• HTTP request URLs
• HTTP methods (GET, POST, PUT, DELETE, etc.)
• Request headers
• Request body content
• Response headers
• Response body content
• Response status codes
• Request timing information

What We Do NOT Collect

• We do NOT collect any personal information
• We do NOT transmit any data to external servers
• We do NOT use analytics or tracking services
• We do NOT collect browsing history beyond active debugging sessions
• We do NOT store or access your passwords, credentials, or sensitive form data

Data Storage

All captured request data is stored locally on your device using Chrome’s storage.local API. This data:

• Remains entirely on your computer
• Is automatically cleared when you close the tab or clear the extension data
• Can be manually cleared at any time using the “Clear” button in the extension
• Is never synced to any cloud service or external server

Permissions Explained

The Extension requires the following permissions to function:

activeTab

Purpose: Allows the Extension to interact with the currently active browser tab when you click the extension icon. Data Access: Only accesses the tab you are actively viewing when you open the extension popup.

storage

Purpose: Stores captured request data and your preferences (like theme settings) locally on your device. Data Access: Data is stored locally and never transmitted externally.

scripting

Purpose: Enables the Extension to inject the request interceptor script into web pages to capture XHR and Fetch requests. Data Access: The injected script only monitors network requests; it does not access or modify page content, forms, or user inputs.

host_permissions (All URLs)

Purpose: Required to monitor XHR/Fetch requests on any website you choose to debug. Data Access: The Extension only activates on pages where you explicitly use it. It captures network request data solely for debugging purposes.

Data Sharing

We do NOT share, sell, or transfer any data to third parties. All data remains local to your browser.

Data Security

• All data is stored locally using Chrome’s secure storage APIs
• No data is transmitted over the internet
• No external connections are made by the Extension

User Control

You have full control over your data:

• Clear Data: Click the trash icon in the extension to clear all captured requests
• Disable Extension: Disable or remove the extension at any time via Chrome’s extension settings
• Per-Tab Data: Request data is stored per-tab and cleared when the tab is closed

Children’s Privacy

This Extension is a developer tool and is not directed at children under the age of 13. We do not knowingly collect any information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the “Last Updated” date at the top of this document.

Open Source

XHR Viewer is open source. You can review the complete source code to verify our privacy practices.

Contact

If you have any questions or concerns about this Privacy Policy, please contact:

Email: to@allahabadi.dev

---

Summary

Aspect	Details
Data Collection	Network requests (URLs, headers, bodies) - locally only
Data Transmission	None - all data stays on your device
Third-Party Sharing	None
Analytics/Tracking	None
Data Storage	Local browser storage only
User Control	Full control to clear data anytime

TL;DR: XHR Viewer stores all data locally on your device. Nothing is ever sent to external servers. Your data stays with you.