Privacy Policy
Developer Page Inspector — browser extension for Chrome, Microsoft Edge and Firefox · Effective date: 3 October 2026
Summary
The extension is local-first. Pages you inspect or audit are analysed inside your browser. There is no account, no analytics, no telemetry, no advertising and no server of ours that receives page data. We do not sell or share user data, and we do not use it for anything other than the features you use.
Permissions and why they are needed
| Permission | Purpose |
|---|---|
activeTab, scripting | When you open the extension on a tab, read that page's DOM and styles to inspect elements, run the audit, draw overlays (box model, focus order, rulers) and capture screenshots. Nothing runs on pages you don't open it on. |
storage | Settings, rule preferences, notes and snapshots, stored locally (chrome.storage and IndexedDB). |
sidePanel, contextMenus, alarms | Show the workbench next to the page, add “Inspect element” / “Audit this page” to the right-click menu, and re-check a Pro license once or twice a day. |
| Access to websites (optional) | Never granted at install. Requested for the sites a tool needs, when you use it: keeping a tool working after the page reloads, batch audits, link and hreflang checks, asset ZIP, the responsive viewer. Revocable in Settings → Permissions. |
cookies (optional) | Only for the Cookie editor, only for the current site, after you click “Allow”. Values are masked until you reveal them. You can edit, add, delete, import and export cookies; the extension never stores or sends them on its own. |
downloads (optional) | Only for “Download all” in the asset inventory. |
browsingData (optional) | Only for “Clear site data”, after a confirmation, for the current site. |
contentSettings (optional, Chrome/Edge) | Only for “Disable JavaScript” in Tools, for the site you choose. |
webRequest (optional) | Only while you use “HTTP status & redirects” (status codes, redirects, server IP and headers of that tab's page load) or record “Marketing tags” (analytics and ad-pixel requests from that tab, decoded for you). Nothing is blocked, stored or sent. |
declarativeNetRequestWithHostAccess (optional, Chrome/Edge) | Only for the user-agent switcher and the header editor: changes the request/response headers you set, for the one tab you chose, until you press Reset or close the browser. |
userScripts (optional) | Only for “Site snippets”: CSS/HTML/JavaScript you write runs on the site you chose. Nothing is downloaded from us. |
api.lemonsqueezy.com | Activate and validate a Pro license key. |
Data stored on your device
- Snapshots you save: audit findings, page metadata, colors, fonts, asset URLs, detected technologies and, if you choose, a downscaled screenshot.
- Notes you add to elements, rule settings, custom rules, ignored findings, guided-checklist progress and color-picker history.
- Design overlay images you upload (per site), site snippets you write, the last header-editor rows, and your own PageSpeed Insights API key if you add one.
- Onboarding and rating-prompt state (dates and counters only), a daily audit counter on the Free plan.
- If you buy Pro: the license key, activation instance id, plan and last validation time.
- If you arrived through an affiliate link: the affiliate code (letters and digits), so the referral is credited at checkout.
Storage, IndexedDB and cookie values of the pages you inspect are shown to you only; the extension does not save them. When you edit or delete one, the change is written to that site's storage in your browser, as if you did it in the browser's developer tools. Exports redact secret-looking values by default.
Data sent off your device
Only in these cases, and only when you use the feature:
- License (Pro only). The license key, the activation instance id and an instance name made of the browser name and major version are sent to Lemon Squeezy, our payment provider and merchant of record. Checkout, subscription management (including cancelling auto-renew) and the affiliate program run on Lemon Squeezy's hosted pages; the extension never sees card details.
- Feedback you choose to send. The Settings → Feedback form sends only what you type (and your email, if you enter it) to Tally, which hosts our feedback form. Nothing about the page you are inspecting is included.
- Lighthouse. “Run” in SEO → Lighthouse sends the page URL (and your own API key, if you added one) to Google PageSpeed Insights, which loads the public page and returns scores.
- Requests to the sites themselves. The audit asks the inspected site for its own
robots.txt,sitemap.xml,llms.txtand response headers. “Check links”, the hreflang checker, “ZIP” and “Optimize images” request the linked pages and files directly from your browser, without cookies; images are re-encoded locally. Quick links (PageSpeed Insights, Rich Results Test…) open only when you click them.
Page content, findings, screenshots and everything else listed above are never sent anywhere by the extension.
Retention and deletion
Data stays until you delete it. Settings → Delete all local data erases snapshots, notes, overlays and settings (your license stays until you deactivate it). Uninstalling removes everything.
Changes
If this policy changes, the effective date above changes with it.