DevHeader Privacy Policy

Last updated: 2026-07-16

Summary

DevHeader is a local Chrome extension for adding custom HTTP request headers during development. DevHeader does not sell user data, does not use analytics, and does not transmit stored rule data to any external server.

Data DevHeader Stores

DevHeader stores only the data needed to provide its feature set:

  • Domain patterns you configure for header scoping
  • Header rule names and values you create
  • Per-rule enabled/disabled state

This data is stored locally in Chrome extension storage on your machine.

Data DevHeader Does Not Collect

DevHeader does not collect or transmit:

  • Browsing history for analytics or profiling
  • Personal account data
  • Payment data
  • Authentication credentials
  • Stored header rules to a remote service

How Data Is Used

The stored configuration is used only to:

  • Show your saved domains and header rules in the popup
  • Apply request header modifications to the domains you configure
  • Preserve your settings between browser sessions

Permissions

DevHeader requests only the permissions needed to work:

  • storage to save your local configuration
  • declarativeNetRequest to apply configured request-header rules
  • permissions and optional host permissions to request access to user-selected domains at runtime

Host access is requested only when needed for the domains you choose.

Data Sharing

DevHeader does not share your stored configuration with third parties.

Remote Code

DevHeader does not load or execute remote code as part of its normal operation.

Security

DevHeader is designed to keep configuration data local to the browser extension storage available on your device. As with any browser extension, you should review permissions before installing and use only builds from sources you trust.

Changes To This Policy

If DevHeader's data practices change, this privacy policy should be updated before the corresponding release is published.

Contact

If you publish DevHeader with a dedicated support or product email, replace this section with that public contact address.