|
| 1 | +<!DOCTYPE html> |
| 2 | +<html lang="en"> |
| 3 | +<head> |
| 4 | + <meta charset="UTF-8"> |
| 5 | + <meta name="viewport" content="width=device-width, initial-scale=1.0"> |
| 6 | + <title>Django DevBar - Privacy Policy</title> |
| 7 | + <style> |
| 8 | + body { |
| 9 | + font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif; |
| 10 | + line-height: 1.6; |
| 11 | + max-width: 800px; |
| 12 | + margin: 0 auto; |
| 13 | + padding: 40px 20px; |
| 14 | + color: #333; |
| 15 | + } |
| 16 | + h1 { |
| 17 | + color: #2c3e50; |
| 18 | + border-bottom: 2px solid #3498db; |
| 19 | + padding-bottom: 10px; |
| 20 | + } |
| 21 | + h2 { |
| 22 | + color: #34495e; |
| 23 | + margin-top: 30px; |
| 24 | + } |
| 25 | + ul { |
| 26 | + padding-left: 20px; |
| 27 | + } |
| 28 | + li { |
| 29 | + margin: 10px 0; |
| 30 | + } |
| 31 | + .last-updated { |
| 32 | + color: #7f8c8d; |
| 33 | + font-size: 0.9em; |
| 34 | + font-style: italic; |
| 35 | + } |
| 36 | + code { |
| 37 | + background: #f4f4f4; |
| 38 | + padding: 2px 6px; |
| 39 | + border-radius: 3px; |
| 40 | + font-family: 'Monaco', 'Menlo', 'Courier New', monospace; |
| 41 | + } |
| 42 | + </style> |
| 43 | +</head> |
| 44 | +<body> |
| 45 | + <h1>Django DevBar - Privacy Policy</h1> |
| 46 | + |
| 47 | + <p class="last-updated">Last Updated: December 27, 2025</p> |
| 48 | + |
| 49 | + <h2>Overview</h2> |
| 50 | + <p> |
| 51 | + Django DevBar is a developer tool Chrome extension designed to display performance metrics |
| 52 | + for Django web applications during local development. We are committed to protecting your privacy |
| 53 | + and being transparent about our data practices. |
| 54 | + </p> |
| 55 | + |
| 56 | + <h2>Data Collection</h2> |
| 57 | + <p> |
| 58 | + <strong>We do not collect, transmit, or store any personal data.</strong> The extension operates |
| 59 | + entirely locally on your device and does not send any information to external servers. |
| 60 | + </p> |
| 61 | + |
| 62 | + <h2>Data Processed Locally</h2> |
| 63 | + <p>The extension processes the following data locally in your browser:</p> |
| 64 | + <ul> |
| 65 | + <li> |
| 66 | + <strong>HTTP Response Headers:</strong> The extension reads <code>DevBar-Data</code> headers |
| 67 | + from HTTP responses to display performance metrics (query count, execution time, etc.). |
| 68 | + This data is only read from localhost and local development domains. |
| 69 | + </li> |
| 70 | + <li> |
| 71 | + <strong>UI Preferences:</strong> Your preference for showing/hiding the on-page DevBar is |
| 72 | + stored locally using Chrome's storage API. This setting never leaves your device. |
| 73 | + </li> |
| 74 | + <li> |
| 75 | + <strong>Request History:</strong> The extension maintains a history of up to 50 recent |
| 76 | + requests with their metrics in memory. This data is cleared when you close DevTools and |
| 77 | + is never stored persistently. |
| 78 | + </li> |
| 79 | + </ul> |
| 80 | + |
| 81 | + <h2>Permissions Explained</h2> |
| 82 | + <p>The extension requests the following Chrome permissions:</p> |
| 83 | + <ul> |
| 84 | + <li> |
| 85 | + <strong>storage:</strong> Used solely to save your checkbox preference for showing/hiding |
| 86 | + the on-page DevBar. No other data is stored. |
| 87 | + </li> |
| 88 | + <li> |
| 89 | + <strong>Content Scripts on Development Domains:</strong> The extension only runs on localhost |
| 90 | + and local development domains (<code>localhost</code>, <code>127.0.0.1</code>, <code>*.local</code>, |
| 91 | + <code>*.test</code>) to control DevBar visibility. It does not run on any production websites. |
| 92 | + </li> |
| 93 | + </ul> |
| 94 | + |
| 95 | + <h2>Third-Party Services</h2> |
| 96 | + <p> |
| 97 | + This extension does not use any third-party analytics, tracking, or advertising services. |
| 98 | + There are no third-party libraries that transmit data externally. |
| 99 | + </p> |
| 100 | + |
| 101 | + <h2>Data Sharing</h2> |
| 102 | + <p> |
| 103 | + We do not share any data with third parties because we do not collect any data in the first place. |
| 104 | + All processing happens locally in your browser. |
| 105 | + </p> |
| 106 | + |
| 107 | + <h2>Data Security</h2> |
| 108 | + <p> |
| 109 | + Since the extension only works with local development environments and stores minimal data |
| 110 | + (a single UI preference), security risks are minimal. We follow Chrome extension best practices: |
| 111 | + </p> |
| 112 | + <ul> |
| 113 | + <li>Manifest V3 compliance for enhanced security</li> |
| 114 | + <li>Minimal permission requests</li> |
| 115 | + <li>No remote code execution</li> |
| 116 | + <li>HTML escaping to prevent XSS attacks</li> |
| 117 | + <li>Content Security Policy enforcement</li> |
| 118 | + </ul> |
| 119 | + |
| 120 | + <h2>Children's Privacy</h2> |
| 121 | + <p> |
| 122 | + This extension is a developer tool not directed at children under 13. We do not knowingly |
| 123 | + collect any information from children. |
| 124 | + </p> |
| 125 | + |
| 126 | + <h2>Changes to This Policy</h2> |
| 127 | + <p> |
| 128 | + We may update this privacy policy from time to time. Any changes will be reflected in the |
| 129 | + "Last Updated" date at the top of this document. Continued use of the extension after changes |
| 130 | + constitutes acceptance of the updated policy. |
| 131 | + </p> |
| 132 | + |
| 133 | + <h2>Contact</h2> |
| 134 | + <p> |
| 135 | + If you have questions about this privacy policy or the extension, please open an issue on our |
| 136 | + <a href="https://github.com/amureki/django-devbar">GitHub repository</a>. |
| 137 | + </p> |
| 138 | + |
| 139 | + <h2>Open Source</h2> |
| 140 | + <p> |
| 141 | + This extension is open source. You can review the complete source code at |
| 142 | + <a href="https://github.com/amureki/django-devbar">https://github.com/amureki/django-devbar</a> |
| 143 | + to verify our privacy claims. |
| 144 | + </p> |
| 145 | +</body> |
| 146 | +</html> |
0 commit comments