Last updated: July 5, 2026

ApiTab ("the extension", "we", "our") is a local-first API testing tool. This policy explains what data the extension handles and how.


ApiTab does not collect, transmit, sell, or share any of your data. There is no account, no login, and no backend server operated by us. Everything you create in ApiTab — requests, collections, environments, history, and settings — stays on your device.


ApiTab stores the following types of data locally in your browser, using the standard extension storage API (browser.storage.local):

• API requests you build (URLs, methods, headers, query params, body content)
• Collections and saved requests you create
• Environment variables you define (e.g. base_url, token, api_key)
• Request history (automatically kept, up to a configurable limit)
• UI preferences (theme, layout, last-used settings)

This data never leaves your device unless you explicitly export it (see below).

• We do not operate any server that receives your requests, responses, or stored data.
• We do not use analytics, telemetry, or tracking scripts.
• We do not sell or share data with third parties, because we never receive any data in the first place.
• We do not require or support a login/account system.

When you use ApiTab to send an API request (e.g. a GET or POST call you configure), that request is sent directly from your browser to the destination URL you specify — the same as if you typed it into a request tool yourself. We are not an intermediary and do not see, log, or store the contents of these requests or their responses.


ApiTab requests the following browser permissions, and here's why:

| Permission | Purpose |
|---|---|
| storage | Save your collections, environments, history, and settings locally |
| host_permissions: <all_urls> | Allow the extension to send API requests to any URL you specify, and read full response headers/timing without CORS restrictions |

No permission is used to collect data on your browsing activity outside of the ApiTab interface itself.

• Export: You can export your entire workspace (collections, environments, history, settings) as a JSON file at any time via the Options page.
• Delete: You can clear all locally stored data at any time via Options → Clear all data. Uninstalling the extension also removes all locally stored data, per standard browser behavior.

ApiTab is a developer tool not directed at children, and it does not knowingly collect data from anyone, including children, since it collects no data at all.


If this policy changes, the updated version will be posted here with a revised "Last updated" date. Material changes will also be reflected in the extension's store listing.


Questions about this policy can be directed to: [your contact email/GitHub issues link here]