Data collection
What data does Requstrix access?
- Network traffic (User Activity & Website Content): When the user explicitly starts a capture session, Requstrix records XHR and fetch requests from the actively inspected browser tab. This includes request URLs, HTTP methods, headers, request bodies, response headers, response bodies, and timing information.
- Personally Identifiable Information (PII) — opt-in only: If the user explicitly enables "PII scan," the extension uses pattern matching to detect potential PII (email, phone, name patterns) within captured network data. All PII findings are displayed with masked/redacted samples only.
- User preferences & configuration: The extension stores user settings locally, including: theme preference, slow threshold, workspace names, mock configurations, test suite definitions, environment variables, and optional AI provider/model selection.
- Optional AI API keys: If the user chooses to use the AI Analysis feature, they provide their own API key (OpenAI or Google Gemini). This key is stored locally on the user's device using Chrome's storage API.
What data does Requstrix NOT collect?
- Requstrix does not collect data in the background or when the user is not actively using the extension.
- Requstrix does not record network traffic unless the user explicitly clicks "Start."
- Requstrix does not have a backend server. No data is transmitted to the developer.
- Requstrix does not access browsing history, bookmarks, passwords, or data from tabs other than the one being inspected.
Data usage
All captured data is used exclusively to provide the extension features:
- Displaying request/response details in the DevTools panel
- Generating Postman collections, cURL commands, and ZIP exports
- Running assertions, test suites, and performance analysis
- Generating mock responses and replaying requests
- Detecting potential PII patterns (opt-in only)
- Providing AI-powered analysis (opt-in only, using the user's own API key)
Data storage
- All data is stored locally on the user's device using Chrome's
storage.localAPI. - Captured network traffic exists only in memory during the active session and is cleared when the user clicks "Clear All" or closes DevTools.
- Persistent data (settings, mocks, suites, environments) is stored in Chrome's local storage and never leaves the device.
- No data is stored on remote servers.
Data sharing
- Requstrix does NOT share any user data with third parties.
- Requstrix does NOT sell user data.
- Exception — AI Analysis (user-initiated only): When the user explicitly clicks "Analyze," captured request metadata (URLs, methods, status codes, timing — with PII patterns redacted) is sent to the AI provider the user selected (OpenAI or Google Gemini) using the user's own API key. This happens only on explicit user action, never automatically.
Third-party services
The only third-party communication occurs during optional AI Analysis:
| Service | When | Data sent | User control |
|---|---|---|---|
| OpenAI API | User clicks "Analyze" with OpenAI selected | Request metadata (PII redacted) | User provides own key, opt-in only |
| Google Gemini API | User clicks "Analyze" with Gemini selected | Request metadata (PII redacted) | User provides own key, opt-in only |
No other third-party services are contacted. Your relationship with AI providers is governed by their privacy policies:
Permissions justification
| Permission | Why it's needed |
|---|---|
storage |
Save user preferences, mock configurations, test suites, and optional AI keys locally on the device |
debugger |
Attach to the inspected tab for mock API interception (returning user-configured responses instead of real server responses). Only attached when user enables a mock. |
host_permissions (<all_urls>) |
Required for the DevTools extension to inspect network traffic on any website the user is debugging |
User control
- Start/Stop: Network recording only happens when the user explicitly clicks Start.
- Clear All: Removes all captured data from memory.
- PII Scan: Disabled by default; user must opt in.
- AI Analysis: Disabled by default; user must configure and explicitly trigger.
- Mock Interception: Only active when user enables a mock; debugger detaches when disabled.
- Data Gen Auto-fill: Only fills page fields on explicit user click.
Data retention
- In-memory captured traffic: Cleared on "Clear All," Stop, or closing DevTools.
- Persistent settings (mocks, suites, etc.): Stored until the user deletes them or uninstalls the extension.
- No server-side retention exists.
Children's privacy
Requstrix is a developer tool not directed at children under 13. We do not knowingly collect data from children.
Changes to this policy
If this policy is updated, the changes will be reflected in this document with an updated "Last Updated" date.
Contact
For questions about this privacy policy:
- Developer: Rocky Saini
- Email: info@codesefod.com
- Website: codesefod.com
This policy applies to the Requstrix Chrome extension only.