HeaderSmith Privacy Policy

1. The Zero-Data Commitment

HeaderSmith was created with a single uncompromising commitment: zero user data collection, zero telemetry, and 100% on-device execution.

Unlike legacy extensions that intercept network traffic in background scripts, HeaderSmith is built on Chrome's Manifest V3 declarativeNetRequest (DNR) engine. Under this architecture, the extension cannot inspect, collect, or transmit your browsing history or traffic payloads.

2. Information We Do NOT Collect

• No Browsing History: We do not track the URLs you visit or your browsing activity.
• No Network Payloads: We cannot read request bodies or response payloads.
• No Personal Identifiers: We do not collect names, email addresses, IP addresses, or device IDs.
• No Analytics SDKs: There are zero analytics libraries or tracking SDKs.
• No Outbound Network Calls: The extension makes zero network requests. You can verify this in Chrome DevTools Network Tab.

3. Local Device Storage

All user configurations (named profiles, header names, test values, and URL filters) reside exclusively on your machine in chrome.storage.local. This data never leaves your device.

4. Why Manifest V3 DNR Guarantees Privacy

HeaderSmith supplies declarative modification rules directly to Chrome's native network engine. Because Chrome modifies the headers at the browser engine level, extension JavaScript never sees your web traffic.

5. Minimal Permissions

• declarativeNetRequest: Allows declarative modification of request and response headers.
• storage: Saves your profiles and rules locally in your browser.
• tabs: Displays which rules match the current tab inside the toolbar popup.
• <all_urls>: Required by Chrome DNR to modify headers across arbitrary user-specified testing domains.

6. Contact

For questions or verification, contact: support@headersmith.dev