TraceAnaPrivacy Policy
Last updated: 24 August 2026
In short: this extension processes network traffic entirely inside your own browser. Nothing you capture is sent to any server we operate — we don't operate any server it talks to by default. The one exception (the optional Agent Bridge) connects to a program running on your own computer, not ours.
What this extension does
TraceAna is a Chrome DevTools extension for inspecting, analyzing, and debugging HTTP/API network traffic on websites you choose to inspect. It adds a panel inside Chrome's own Developer Tools.
What data it accesses, and why
To do its job, the extension needs broad technical access to network requests and page content. Here's exactly what each permission is for:
| Permission | What it's for |
|---|---|
| host_permissions: <all_urls> | Lets the Composer/Replay feature send requests to any domain without being blocked by cross-origin restrictions, lets the content script run on any page you inspect, and lets the on-demand tag scanner read a page's script tags. |
| storage | Saves your sessions, rules, and composed requests locally in your browser (chrome.storage / IndexedDB) so they persist between uses. Never leaves your device. |
| declarativeNetRequest / Feedback | Powers the Rules feature (block/redirect/modify-header rules you create) and confirms when a rule you created actually matched a request. |
| scripting | Runs a short, read-only script in the inspected page (only when you use the "API Intel" or "Rescan tags" feature) to detect which analytics/tag scripts are present on the page. |
| content_scripts | A script that hooks window.dataLayer.push on pages you visit, so the Tag Watch feature can show GTM/GA4 data layer events as they happen. Runs on every page but only reads/relays dataLayer pushes — nothing else. |
Where captured data goes
- Network requests you capture stay in the extension's local storage (IndexedDB) inside your browser profile, unless you explicitly click Export/Download.
- AI Analysis runs entirely with local, rule-based logic (no external AI API, no network call, no account).
- Agent Bridge (optional, off by default) connects only to
127.0.0.1/your own LAN — a small program you run yourself on your own machine. We do not operate, receive data from, or have access to that program or its traffic. - Exporting a HAR file or sending to Google Sheets (if you set that up) only happens when you click an explicit Export/Send button — the extension includes a built-in privacy scanner that flags secrets/PII in what you're about to export before it happens.
What we do not do
- We do not operate a server that receives your captured data.
- We do not sell or share data with third parties.
- We do not track your browsing across sites for advertising.
- We do not use remote code — all logic ships inside the extension package you installed.
Your controls
- Capture only runs while you have DevTools open on a tab — closing DevTools stops it.
- Clear button wipes captured data immediately.
- Agent Bridge is off by default and only polls when you explicitly enable it.
- You can remove the extension at any time via
chrome://extensions, which deletes all locally stored data.
Contact
Questions about this policy: support@yobhalla.com or via yobhalla.com.