Privacy Policy — Add HTTP Header Extension

Last updated: 2026-02-03

Summary

Add HTTP Header is a browser extension that allows users to add or modify HTTP request headers based on user-defined rules. This extension does not transmit your rules or browsing data to any external servers — all configuration is stored locally in your browser.

What data the extension accesses

• The extension listens to outgoing HTTP requests using the webRequest API in order to apply header rules.
• The extension reads and writes the user-configured rules in your browser's local storage (browser.storage.local).

What data is collected, stored, or transmitted

• Data stored: the header rules you create (match type, target pattern, header name, header value). These are stored locally in your browser only.
• No telemetry or analytics: the extension does not collect or send usage statistics, crash reports, or browsing data to any third-party servers.
• No automatic uploads: nothing is uploaded or shared unless you explicitly choose to export or share it yourself.

Why the extension needs permissions

• webRequest / webRequestBlocking + <all_urls>: required so the extension can inspect outgoing requests and add or modify headers according to your configured rules. These permissions are necessary for the extension's core functionality.
• storage: used to persist your rules in the browser so they remain available between sessions.

How long data is kept

• Rules persist until you delete them. They are stored in the browser's profile and will remain until you remove them or clear extension storage.

How you can control or delete your data

• To modify or delete rules, open the extension Options page and edit or delete individual rules.
• To remove all stored rules, you can either delete them from the Options UI or uninstall the extension. You can also clear the extension's storage via your browser's settings.

Third-party services

• The extension does not use third-party analytics, crash reporting, or telemetry services.

Security and responsible usage

• You are responsible for the headers you add. Avoid adding or overriding sensitive headers that could break requests or undermine security (for example, do not override Host, Content-Length, Transfer-Encoding, or other transport-level headers unless you understand the implications).
• The extension only modifies requests on your device and does not attempt to bypass browser security controls.

Changes to this policy

This policy may be updated to reflect changes in the extension. When changes are made, this document will be updated with a new "Last updated" date.