HAR Viewer Offline privacy policy

1. Who we are and what this policy covers

HAR Viewer Offline is a browser extension for Google Chrome, published by an independent developer. This policy explains what the extension does with your data, what our website at haranalyzer.app does, and what rights you have. It applies to the extension itself and to the pages of haranalyzer.app that belong to it: the welcome page, the uninstall page and this page. The online HAR Analyzer tool on the same website has its own policy at haranalyzer.app/privacy.

The short version: the extension works inside your browser, makes no network requests and does not send your data anywhere.

2. What data the extension handles

The extension does not send personal data to us or to anyone else, and we do not sell it. The data described below is handled only on your device.

• HAR files you open. A HAR file is a record of network traffic. It usually contains the addresses of pages you visited, request and response headers, cookies, authorization headers, session tokens and the bodies of requests and responses, which can include personal data about you and about the users of the sites in the file. You choose the file yourself (drop it, pick it from disk or paste its text) on the extension's own page. The extension parses it in a background thread of that tab and keeps it only in memory while the tab is open. It is not written to the extension's storage, not cached and not sent anywhere. Closing the tab discards it.
• Files you save. The clean copy and the CSV list are built in the same memory and saved by your browser like any other download. Your original file is never changed.
• Settings. Which cleaning rules are ticked and the sort order are saved with the browser's built-in chrome.storage.local API. This data stays in your browser profile and never leaves your device.
• No accounts. The extension has no sign-up, no login and no user profiles.
• No tracking inside the extension. The extension contains no analytics, no advertising code and no remote code. It has no content scripts and no access to the websites you visit or to your other tabs.

About the cleaning feature. Clean copy replaces cookies, authorization headers and tokens it recognises with [redacted] in headers, cookies, every address in the file and JSON or form bodies (base64-encoded ones too), and lists what it did not cover: header names it did not recognise, HTML or JavaScript bodies where keys and passwords stay (only JWTs there are removed) and binary bodies it did not read. Please check the copy yourself before you share it with anyone.

3. Cookies and analytics on our website

The pages of haranalyzer.app use Google Analytics 4 to count visits and to understand which pages are useful. This happens only on the website, not inside the extension. The uninstall page has no analytics. The welcome page, which opens once after installation, also reports whether the extension's icon is pinned to your toolbar. We never send Google Analytics the files, text or addresses you work with. Advertising features are off for everyone.

If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are off by default. Google works out your country from your IP address. Without your consent, Google Analytics sets no cookies and stores no identifier on your device. The Google script still loads and can send Google a basic signal without a cookie: the page you opened, the time, your browser and device type, and your approximate location.

Everywhere else, analytics cookies are on by default. Google Analytics sets cookies named _ga and _ga_ followed by the property code, which can last up to two years, and processes the same technical data.

Your browser connects to Google to load the script, so Google sees your IP address. Google says Google Analytics 4 uses it to estimate location and does not store it. Statistics are kept for 14 months (see section 8).

Your choice. If your browser's time zone is in Europe, tool, article and privacy pages ask "Allow analytics cookies?" Yes and No take one click each. We save your answer in your browser's local storage and apply it to the whole website, including pages that do not ask. The "Cookie settings" button at the bottom of those pages lets anyone, in any country, change the answer at any time. Choosing No stops analytics cookies and deletes the ones already set.

You can also block cookies in your browser settings, use a content-blocking extension or install Google's opt-out add-on. The website keeps working without them. Google's own privacy policy describes how Google processes this data.

Server logs. Like any web server, ours keeps a technical log of requests to these pages: IP address, the address requested, the time, the browser type and, if your browser reports it, the page you came from. The site is served through Cloudflare, which also sees this traffic and protects the site from abuse. We use the log to keep the site running and safe, and it is deleted automatically after a short time. The extension sends nothing to this log; only opening one of these pages does.

4. How we use data

The only data we receive is the aggregated website statistics and server logs described above and, if you choose to send them, your answer on the uninstall page and any email you write to us. We use the statistics to see how many people reach the welcome page, the logs to keep the site running and safe, and your answers and emails to reply to you and to improve the extension. We do not build individual profiles and we do not combine this data with any other source.

When you remove the extension, Chrome opens a short page on our website that asks why. Answering is optional. Only if you press Send, the reason you picked and the text you typed (up to 500 characters) go to our server, which passes them to us as a message in Telegram with the name of the extension and does not store them. To stop spam, the server counts answers per day by a one-way hash of your IP address with a key that changes every day; the hash is kept for 2 days and is never part of the message. The uninstall page has no analytics and sets no cookies. Please do not put personal details in your answer.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

5. Who we share data with

We do not sell or rent data, and we share it only with the services named here. They process data for us: Google Analytics, as a service provider for the website statistics in section 3; Telegram, which delivers answers from the uninstall page to us (it receives the extension name, the reason and the text you send, but not your IP address or any install ID); Cloudflare and our hosting and email providers, which carry the website traffic, store the server logs and the emails you send us. Please do not put personal details in your answer on the uninstall page. We have no server that receives data from the extension.

6. Your rights, including under the GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct or delete personal data about you, to restrict or object to its processing, and to lodge a complaint with your local data protection authority. Because the extension keeps files only in memory and settings only on your device, you can exercise these rights yourself at any time (see section 8). For website analytics, you can opt out as described in section 3. For anything else, write to [email protected] and we will answer within 30 days.

The legal basis for analytics cookies in those places is your consent, which you can withdraw as described in section 3. The legal basis for the basic signal without cookies, for website analytics elsewhere and for server logs is our legitimate interest in understanding how the website is used and keeping it safe. The legal basis for emails and uninstall page answers you send us, and for counting those answers by the IP hash, is our legitimate interest in replying to you, improving the extension and preventing spam. The legal basis for storing your settings is that you asked the extension to remember them.

7. Children

The extension and the website are not directed at children under 13 (or under the age set by your country's law). We do not knowingly collect data from children. The extension sends nothing to us, so we hold no such data from it.

8. Data retention and deletion

HAR files exist only in the memory of the extension's tab and are gone when you close it. Settings live in your browser only; removing the extension from Chrome deletes them. Website analytics data is kept by Google Analytics for the retention period set in our account (14 months) and then deleted automatically. Server logs are deleted automatically after a short time. We keep emails only as long as we need them to reply or to improve the extension, and you can ask us to delete them. Answers from the uninstall page stay in our private Telegram chat until we delete them; our server keeps only the daily counts and the IP hash described in section 4, for 2 days.

9. Changes to this policy

If we change this policy, we will update the text on this page and the date at the top. Please check this page from time to time if you want to stay informed.

10. Contact

Questions about this policy or about your data: [email protected].