Privacy Policy — CSP Disabler

Last updated: 2026-10-23

CSP Disabler ("the extension") is a browser developer tool for inspecting, toggling, and testing Content-Security-Policy behavior on web pages and their iframes. This page explains what the extension does and does not do with your data.

Summary

The extension does not collect, store, or transmit any of your data to us or to any third party. Everything it does happens locally, inside your own browser.

What the extension accesses, and why

• Page requests and responses (headers only): the extension reads and can remove or replace Content-Security-Policy response headers on tabs/iframes you choose to test. It does not read or store page content, form data, cookies, or credentials.
• Page CSP violations, console messages, and service worker registrations: shown only in the extension's own popup, for the tab you have it open on, so you can debug your own site. This data is kept in memory and in the browser's local session storage — it is never sent anywhere.
• Your toggle settings and theme preference: saved locally via the browser's extension storage APIs (chrome.storage.session / chrome.storage.local) so your settings persist across popup opens. This data stays on your device.
• Exported files (JSON/HAR/CSP logs): generated on demand and saved directly to your own Downloads folder, at your request, via the browser's download API. Nothing is uploaded anywhere.

What the extension does not do

• It does not use analytics, tracking pixels, or third-party SDKs.
• It does not send any data to a remote server operated by us or anyone else.
• It does not sell, rent, or share user data, because it does not collect any.
• It does not access your browsing history beyond the currently open tab you're actively debugging.

Enterprise policy (optional, admin-configured)

If a workplace administrator has configured a managed policy value for this extension (via the standard Chrome enterprise "3rd-party extension" policy mechanism), that value is displayed in the extension's Browser Policy tab. This is configured by the administrator, not collected from the user.

Changes to this policy

If this policy changes, the "Last updated" date above will change accordingly. Material changes will also be noted in the extension's Chrome Web Store listing.

Contact

Questions about this policy or the extension can be directed to the developer through the support contact listed on the extension's Chrome Web Store listing page.