API Watchtower Privacy Policy
Last updated: February 28, 2026
API Watchtower is a Chrome extension for developers and testers that captures API request metadata during user-initiated recording sessions and generates a local HTML report.
What Data We Handle
During a recording session, the extension may process:
- Request metadata: request URL, method, type, status code, network error text, and timestamps.
- Performance data: request duration and endpoint-level aggregates.
- Page attribution data: tab/frame/page URL context used for grouping calls by page.
- User settings: base URL filters, auto-download preference, and error-payload capture preference.
- Optional error payload data: capped request payload snapshots for HTTP 4xx/5xx calls only, when enabled by the user.
How We Use Data
Data is used only to provide the extension's core purpose:
- API debugging and diagnostics during UI workflow testing.
- Session analytics and report generation (latency, errors, endpoint health, and page grouping).
Storage and Data Sharing
- Data is stored locally in Chrome extension storage on the user's device.
- Reports are generated locally and saved to the user's Downloads folder.
- The extension does not sell user data.
- The extension does not transfer user data to third parties for advertising or profiling.
- No remote backend is required for core extension functionality.
User Controls
- Recording starts only when the user clicks
Start Tracking. - Recording stops when the user clicks
Stop Tracking. - Users can clear session data from the extension UI.
- Users can configure base URL filters to narrow capture scope.
- Users can enable or disable error request payload capture.
Data Retention
Session records are retained locally until cleared by the user or replaced by subsequent extension session data.
Children's Privacy
API Watchtower is intended for developer/testing workflows and is not directed to children.
Policy Updates
This policy may be updated when extension behavior changes. The updated policy will be published at the same URL with a revised "Last updated" date.
Contact
For privacy questions, contact: REPLACE_WITH_CONTACT_EMAIL