// Privacy

GraphPeek is a Chrome extension that helps developers inspect the GraphQL requests their own application makes. It is built on a single principle: your traffic never leaves your browser. This policy explains, in plain terms, what that means.

The short version

• We do not collect, transmit, sell, or store your data on any server.
• The extension makes zero outbound network calls of its own.
• There is no analytics, no telemetry, and no tracking of any kind.
• There are no accounts. Nothing to sign up for, nothing to log in to.

What the extension can see

To do its job, GraphPeek observes network requests in the active tab that match a GraphQL endpoint (URLs containing /graphql). For those requests it reads the request body, headers, and response so it can show you the operation name, variables, status, and timing in the sidepanel.

This information is held only in your browser's memory, scoped to the tab it came from. When you close the tab or the browser, it is gone. Nothing is written to disk, synced, or sent anywhere.

Permissions, and why

• webRequest — to observe network traffic so GraphQL operations can be detected and parsed.
• sidePanel — to render the inspector UI alongside your app.
• <all_urls> (read-only) — because we don't know in advance which domain your GraphQL endpoint lives on. This access is used solely to read GraphQL requests for display; it is never used to modify requests or contact any server.

Third parties

GraphPeek does not share data with third parties, because it does not collect data in the first place. There are no third-party analytics, advertising, or tracking SDKs bundled into the extension.

Changes to this policy

If this policy ever changes, the updated date at the top of this page will change with it. Material changes will be reflected in the extension's listing on the Chrome Web Store.

Contact

Questions about privacy? Email omerfrq7@gmail.com.