Privacy Policy

1. Data the extension handles

HAR Analyzer handles data only when you choose to upload a HAR/JSON file or start live capture for the current browser tab. Depending on the source, this data may include:

• page URLs, request URLs, domains, paths, and redirect targets;
• HTTP methods, status codes, resource types, sizes, and timing information;
• limited diagnostic response headers: content type, content length, and cache-control;
• the current page title and URL;
• diagnostics and a developer brief derived from that network trace.

A raw HAR file can contain sensitive values added by a website. During local normalization, HAR Analyzer discards request headers, keeps only the limited response headers listed above, removes URL credentials and fragments, and replaces common authentication, credential, session, signature, and secret query values with [REDACTED]. The raw HAR file is not stored by the extension. Review a HAR file before sharing it with anyone outside the extension.

2. How the data is used

The data is used solely to provide the extension's user-facing purpose: displaying and analyzing the network trace you selected, identifying request errors and performance issues, grouping domains, and generating a copy-ready brief.

Live capture starts only after a user action and is limited to the tab where HAR Analyzer was opened. The extension does not use network data for advertising, profiling, credit decisions, or unrelated analytics.

3. Local processing and retention

Analysis and sanitization are performed locally by the extension. Only the sanitized, normalized workspace for each analyzed tab is stored in chrome.storage.session so it can survive a Manifest V3 service worker restart during the current browser session.

You can remove the current workspace with the Clear action. Closing the analyzed tab removes its workspace, closing the browser session clears session storage, and uninstalling the extension removes its extension storage through Chrome.

4. Data sharing and sale

HAR Analyzer does not transmit network trace data to the developer, does not share it with third parties, and does not sell user data. No external AI or backend analysis API is used in the current version.

The developer does not have access to or allow humans to read the HAR files, captured requests, diagnostics, or briefs processed inside your browser.

5. Permissions

• scripting allows the extension to collect performance entries for the page you chose to analyze.
• webRequest and HTTP/HTTPS host access allow user-initiated live capture of request lifecycle metadata and limited diagnostic response headers on supported HTTP/HTTPS pages, including requests to third-party resource origins used by the page. Request headers are not collected.
• sidePanel displays the analyzer interface.
• storage retains the tab workspace in Chrome session storage.

6. External services

The HAR Analyzer website is hosted by GitHub Pages and uses Umami Cloud for anonymous page-view analytics. Optional feedback is handled through Google Forms. These services may process standard connection and device information under their respective privacy policies. HAR Analyzer does not send HAR files, captured requests, diagnostics, generated briefs, names, or email addresses to these services.

7. Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

8. Changes to this policy

If the extension's data practices change, this policy and any required in-product disclosures will be updated before the changed practices are introduced. The effective date at the top of this page identifies the current version.

9. Contact

Questions about this policy or HAR Analyzer can be submitted through the HAR Analyzer support issue tracker. Do not include HAR files, authorization headers, cookies, tokens, or other sensitive data in a public issue.