Privacy Policy

Last updated: July 17, 2026

Header Kit stores your profiles, rules, and interface settings locally in Chrome. It does not upload, sell, or transmit your data to the developer or any external server.

Header Kit ("the extension") is a Chrome extension for development and QA workflows. It helps you create local profiles for modifying request headers, response headers, cookies, query parameters, redirects, and scoped matching rules.

Data stored locally

Header Kit stores the following data locally on your device:

User-created profiles and rules.
Header, cookie, query parameter, redirect, filter, and variable values entered by you.
Extension settings such as theme, color mode, language, and active profile.
Import and export draft state while you are editing configuration JSON.

This data is stored with Chrome's local extension storage APIs and remains on your device.

Data transmission

None. Header Kit does not transmit profiles, rules, header values, tokens, URLs, settings, or usage data to external servers. It does not use analytics, advertising SDKs, tracking pixels, telemetry services, or remote configuration.

Data sharing

Header Kit does not sell, rent, share, or transfer user data to third parties.

Remote code

Header Kit does not load or execute remote code. All JavaScript, HTML, CSS, icons, locale files, and rule logic are packaged with the extension.

Permissions

Header Kit requests Chrome permissions only to support its core functionality:

declarativeNetRequest applies user-defined request header, response header, cookie, and redirect rules.
storage saves profiles and settings locally.
activeTab reads the current tab context after user interaction.
tabs supports tab-scoped matching and query parameter updates.
tabGroups supports tab group filters when you choose to use them.
<all_urls> allows you to create rules for websites you choose, controlled by domain, URL, resource type, tab, window, and tab group filters.

User control

You can:

Pause all rules from the extension UI.
Delete or edit profiles and rules.
Export or import configuration JSON.
Remove the extension from Chrome to delete extension-managed local storage according to Chrome behavior.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "Last updated" date.

Contact

If you have questions about this privacy policy, contact us at kitlabsai@gmail.com.