# Privacy Policy — JSON Lens

**Last updated: 26 July 2026**

## Summary

JSON Lens collects nothing. It has no analytics, no telemetry, no accounts, and no
servers. It makes no network requests of any kind. Nothing you view is recorded,
transmitted, or shared with anyone, including the developer.

## What the extension can access

JSON Lens runs a content script on pages you visit so that it can recognise a JSON
document and reformat it. That is why Chrome shows the "read your data on all websites"
warning at install time: a server can return JSON from any address, so the extension
cannot be limited to a fixed list of sites in advance.

In practice the extension only acts on a page when that page **is** a JSON document —
when the server labelled it as JSON, or when the page contains nothing but text that
begins with `{` or `[` and parses as JSON. On any other page it does nothing at all: it
reads the document, finds no JSON, and stops.

Everything it does happens locally in your browser, in the moment you open the page.
Nothing is stored, queued, or sent anywhere.

## What is stored

Four display preferences:

- the colour theme (system, light, or dark)
- how many levels of the tree are expanded when a document opens
- whether to format `text/plain` responses that look like JSON
- the file-size limit above which formatting waits for a click

These are saved with Chrome's `storage.sync` API. That means **Chrome** may replicate them
across the devices where you are signed in to the same Google account, using your own
Chrome sync — the same mechanism that syncs your bookmarks. This is a Chrome feature, not
a transfer to the developer: JSON Lens has no server and no way to read those values, and
neither the developer nor any third party receives them.

No JSON content, page content, URL, or any other information about the pages you visit is
ever stored.

## What is never collected

- Personally identifiable information
- Health, financial, or payment information
- Authentication information, passwords, or cookies
- Personal communications
- Location
- Web browsing history
- The contents of documents you view
- Any form of usage analytics

## Permissions and why they exist

| Permission | Why |
| --- | --- |
| `storage` | To remember the four display preferences listed above. |
| Access to all websites | To detect and reformat JSON documents, which can be served from any address. Used only to read the document being formatted. |

## Remote code

JSON Lens contains no remote code. All of its JavaScript and CSS ships inside the
extension package and is reviewable in the source. It loads no scripts, styles, fonts, or
images from any external host.

## Changes to this policy

If this policy ever changes, the updated version will be published at this address and the
date above will be revised.

## Contact

Questions about this policy can be sent to: **<CONTACT EMAIL>**

<!--
Replace <CONTACT EMAIL> before publishing. The Chrome Web Store expects a reachable
contact address in a privacy policy; a mailbox you actually read is enough.
-->