Back to Documentation
Policies
Developer Tools - Request Runner

Privacy Policy

Privacy Policy

Last Updated: December 27, 2025

Introduction

Request Runner ("we", "our", or "the Extension") is a Chrome extension that provides API testing capabilities directly within Chrome DevTools. This Privacy Policy explains how we handle your data when you use Request Runner.

Data Collection

What Data We Collect

Request Runner is designed with privacy in mind. We collect minimal data necessary for the extension to function:

License Information (Pro Users Only)

  • Email Address: Collected when you activate a Pro license
  • License Key: Collected when you activate a Pro license
  • Purpose: License verification to unlock Pro features
  • Storage: Stored locally on your device and encrypted at rest

Request History

  • Request Data: URLs, HTTP methods, headers, and request bodies that you explicitly create
  • Response Data: Status codes, headers, and response bodies from requests you send
  • Purpose: To save and allow you to replay your API requests
  • Storage: Stored locally on your device using Chrome's local storage

Environment Variables

  • Variable Names and Values: Environment variables you create (e.g., API keys, tokens, base URLs)
  • Purpose: To manage different configurations for development, staging, and production
  • Storage: Stored locally on your device and encrypted at rest

Collection Folders and Organization

  • Folder Names and Organization: Folder structure and metadata for organizing requests
  • Purpose: To help you organize your API requests
  • Storage: Stored locally on your device

What We Do NOT Collect

Request Runner does NOT collect:

  • Browsing History: We do not track your browsing behavior or website visits
  • Automatically Collected Data: We do not automatically collect data from websites you visit
  • Analytics Data: We do not use analytics or tracking tools
  • Personal Information: Beyond the email address for license verification (Pro users only), we do not collect personal information
  • Payment Information: License keys are not payment information, and we do not process payments
  • Location Data: We do not collect location or geolocation data
  • Health Information: We do not collect health or medical information
  • Financial Information: We do not collect financial or banking information

Data Storage

All data collected by Request Runner is stored locally on your device using Chrome's chrome.storage.local API. This means:

  • Local Storage Only: All data remains on your computer
  • No Cloud Sync: Data is not synced to cloud servers
  • Encryption: Sensitive data (email addresses and license keys) is encrypted at rest
  • Your Control: You can clear all data at any time through the extension's settings

Data Transmission

License Verification

The only data transmission that occurs is for Pro license verification:

  • What is Sent: Email address and license key
  • When: When you activate or verify a Pro license, and periodically (every 48 hours) to verify license validity
  • Where: Sent to https://backbone-olmstedian.fly.dev/v1/license/verify
  • Purpose: To verify that your Pro license is valid
  • Rate Limit: Limited to 10 requests per 60 seconds

API Requests

When you use Request Runner to make API requests:

  • What Happens: The extension sends HTTP requests to the endpoints you specify
  • Who Receives Data: The API endpoints you choose to test (e.g., api.example.com)
  • Our Role: We act as a client tool - we do not intercept, store, or forward your API request data to our servers
  • Your Responsibility: You are responsible for the API requests you make and the data you send to third-party APIs

Permissions

Request Runner requires the following Chrome permissions:

Storage Permission

  • Purpose: To save your request history, environment variables, and license information locally
  • Usage: Data is stored only on your device using chrome.storage.local

Host Permissions (<all_urls>)

  • Purpose: To allow you to make HTTP requests to any API endpoint you want to test
  • Usage: Only used to execute HTTP requests that you explicitly initiate through the extension interface
  • Important: This permission does NOT allow us to automatically access websites or collect browsing data

Alarms Permission

  • Purpose: To periodically verify Pro license validity in the background
  • Usage: Runs license verification check every 48 hours to ensure Pro licenses remain valid

Data Sharing

We do NOT share your data with third parties. The only exception is:

  • License Verification: Email and license key are sent to our license verification server to validate Pro licenses
  • No Other Sharing: We do not sell, rent, or share your data with advertisers, analytics companies, or any other third parties

Data Security

We take data security seriously:

  • Encryption: Sensitive data (email addresses and license keys) is encrypted at rest
  • Local Storage: All data is stored locally on your device, not on our servers
  • No Cloud Storage: We do not maintain cloud storage of your data
  • Secure Transmission: License verification uses HTTPS for secure transmission

Your Rights and Choices

You have the following rights regarding your data:

Access Your Data

  • Request History: View all your saved requests in the extension's History panel
  • Environments: View and manage your environment variables in the Options page
  • License Information: View your license status in the Options page

Delete Your Data

You can delete your data at any time:

  • Clear History: Use the "Clear Request History" button in the Options page
  • Remove Environments: Delete individual environments in the Options page
  • Clear License: Use the "Deactivate License" button to remove license information
  • Uninstall Extension: Uninstalling the extension removes all stored data

Export Your Data

Pro users can export their request history:

  • Export Feature: Use the "Export" button to download all request history as JSON
  • Data Portability: You own your data and can export it at any time

Children's Privacy

Request Runner is not intended for children under the age of 13. We do not knowingly collect data from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Posting the updated policy in the extension's About section

Your continued use of Request Runner after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the extension's support channels.

Summary

In short:

  • ✅ All data is stored locally on your device
  • ✅ No data is transmitted except for license verification (Pro users only)
  • ✅ No analytics or tracking
  • ✅ No data sharing with third parties
  • ✅ You can export or delete your data at any time
  • ✅ Sensitive data is encrypted at rest

Your privacy is important to us, and we've designed Request Runner to minimize data collection while providing powerful API testing capabilities.