# Privacy Policy for FloatAPI — In-Browser API Tester & Interceptor

• Last updated:* August 1, 2026

## 1. Introduction

FloatAPI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how FloatAPI operates regarding data collection, API request interception, storage, and user privacy when you use our Chrome Extension.

## 2. Information Collection and Use

• FloatAPI does NOT collect, store, upload, track, or transmit any of your API requests, authentication tokens, headers, response payloads, or personal data to any external servers or third parties.*
• 100% Local Processing:* All API requests, fetch/XHR interceptions, request header modifications, and code snippet exports are performed strictly locally within your browser sandbox.
• Local Storage Only:* Saved API collections, environment variables, request history, and user settings are stored locally on your device using Chrome's chrome.storage.local and unlimitedStorage APIs.
• No External Analytics:* We do not track your usage, record your endpoints, or use third-party tracking scripts.

## 3. Permissions Used

FloatAPI requests the following minimum permissions necessary for core functionality:

• storage & unlimitedStorage: Used to save and load your API request collections, history, and workspace environments locally.
• activeTab: Used to toggle the side panel interface on your currently active browser tab.
• scripting: Used to inject the lightweight request interceptor script into webpage contexts so you can capture fetch/XHR traffic for debugging.
• declarativeNetRequest: Used to modify request headers and bypass CORS restrictions when testing APIs directly in your browser.
• sidePanel: Used to display the API workspace natively inside Chrome's side panel.
• Host Permissions (<all_urls>): Required to allow you to intercept, test, and send API requests to any endpoint domain specified by you.

## 4. Data Security & Third Parties

Because FloatAPI operates entirely within your local browser environment, no data is ever transmitted, shared, sold, or transferred to third parties under any circumstances.

## 5. Contact Us