Privacy Policy

Fullmakt API Workbench ("the extension") is a developer tool for defining and testing API endpoints against a Fullmakt backend that you configure. This policy explains what data the extension handles and where it goes.

Summary: The extension's publisher operates no server that receives your data. The only server involved is the backend you point the extension at. Network-capture data stays on your device. There is no analytics, telemetry, tracking, or sale of data.

Data the extension handles

1. Settings & credentials (stored locally). Your configured backend URL, authentication token, and UI preferences are stored in the extension's local browser storage. The auth token is sent only to the backend you configure, to authenticate your requests.
2. API requests and responses you create (sent only where you direct). When you send a request, it goes to the endpoint and/or the Fullmakt backend you specify. The extension's publisher neither receives nor stores this content.
3. Network-capture metadata (local only, optional). When you explicitly start a capture session, the extension uses the webRequest API to observe metadata about your browser's network requests — URL, method, status, request/response headers, timing, remote IP address, and sizes. It does not capture response bodies. This data is displayed in the extension UI and held only in local, in-session memory. It is not transmitted to the publisher or any third party, and browser-capture sessions are not uploaded to your backend. Capturing is off by default and only runs while you have a capture session active.

What the extension does NOT do

• No analytics, telemetry, or usage tracking.
• No third-party trackers or advertising.
• No selling, renting, or sharing of your data.
• No publisher-operated backend that receives your data.

Permissions and why they are needed

The extension installs with only storage and sidePanel. The capture permissions below are optional and requested only when you start a capture.

• storage — persist your backend URL and settings locally.
• sidePanel — render the workbench UI in the browser side panel.
• webRequest + host access (<all_urls>) — optional, requested at the moment you start a capture session. They power the network-capture feature, which observes your browser's request metadata while a session is active. The extension never blocks or modifies requests, and you can decline the prompt.

Data retention

Locally stored settings and credentials persist until you clear them or uninstall the extension. Captured network metadata is discarded when the capture session ends or the side panel closes.

Contact

Questions about this policy: privacy@fullmakt.ai