# Privacy Policy for API Request Builder

Last updated: February 27, 2026

## Overview
API Request Builder is a Chrome extension for building and sending API requests. We do not operate backend servers for this extension and we do not collect or sell personal data.

## Data Processed by the Extension
The extension processes the data you enter in the UI, including:
- Request URL, method, headers, and body
- Authentication fields (for example Bearer token, Basic auth credentials, API key)
- Environment variables
- Request history and response metadata (status, headers, response body shown in UI)
- Local settings (for example timeout, history limit, theme mode)

## Where Data Is Stored
Data is stored locally in your browser using `chrome.storage.local` for extension functionality. The current storage keys include:
- `history`
- `environmentVariables`
- `settings`

## Network Requests
When you click send, the extension sends requests only to the endpoint URL you provide. The request content is transmitted to that target service as part of normal API client behavior.

We do not send your data to developer-owned analytics, advertising, or tracking services.

## Data Sharing
We do not sell, rent, or share your data with third parties for advertising or profiling.

## Data Retention and Control
You control stored data through extension features and browser controls:
- Clear request history in the extension UI
- Edit or remove environment variables
- Remove extension data or uninstall the extension in Chrome

## Security
No method of storage or transmission is 100% secure. Please avoid storing highly sensitive secrets in local extension history when unnecessary.

## Changes to This Policy
If extension behavior changes (permissions, data flow, storage, or external endpoints), this policy will be updated and the "Last updated" date will be revised.

## Contact
For support or privacy questions, provide a contact URL or email on the extension listing page.