Extension: Arg Architect (Chrome and Firefox extension)
Developer: Arg Software
Contact: dev@arg.software
Website: https://arg.software
Effective date: 28 September 2026

Arg Architect is a website-auditing tool for developers. It analyzes the page you are
currently viewing or a URL you enter, entirely inside your browser. Audits run in a
separate runner window the extension opens; the extension does not read or change the
pages you browse normally. This policy describes
what data the extension handles and what, if anything, leaves your device.


Arg Architect produces a technical audit report (performance, security, architecture,
payload, accessibility, DOM, and AI readiness findings) for the website the user chooses to audit.


When you run an audit, the extension reads information from the audited page and your
browser to compute the report. Its page collectors are registered only for the audited
site and only while the audit runs; they are removed when the audit queue finishes. This processing happens only on your device:

• Website content evidence: DOM structure and summaries, meta tags, scripts, style
  classes, link relations, page text samples, JSON-LD, and response headers of the
  audited document.
• Network evidence: request URLs, resource timings, sizes, and response headers
  observed for the audited page load.
• Storage evidence: localStorage / sessionStorage key names, and cookie names
  and values visible to the page (document.cookie). Cookie values are inspected
  transiently in memory to detect authentication token patterns (e.g. expired JWTs);
  they are not included in saved reports.
• Cookie security attributes (opt-in): if you explicitly enable "Deep cookie
  inspection" and grant the optional browser permission, the extension reads cookie
  names and security attributes (Secure, HttpOnly, SameSite, domain, path) of
  the audited site via the browser cookie store. Cookie values are never read in
  this flow, and the data is used only to produce the audit report locally.
• Audit history: scores, findings, and evidence lines (e.g. flagged resource URLs,
  cookie names) are stored in the extension's local storage on your device so you can
  review past audits. You can delete any or all history at any time.

No page content, cookies, storage data, or audit results are uploaded to any server.
No analytics, tracking, or advertising code is present in the extension.


| Flow | What is sent | When |
|---|---|---|
| Contact form | The name, email address, and message you type in the Contact tab, plus, only if you attach one, a short audit summary (site origin, scores, category verdicts, up to eight check names) | Only when you press "Send". Transmitted over HTTPS to api.web3forms.com (form-handling provider). |
| External CDN lookup (optional) | The hostname of the audited site only | Only when you enable "External CDN lookup". Sent over HTTPS to dns.google (DNS-over-HTTPS) and rdap.org. |
| AI discovery lookup (optional) | The hostname of the audited site only | Only when you enable "External AI discovery lookup". Sent over HTTPS to dns.google. |
| Audited site's public files | Normal HTTPS requests for the audited site's own /robots.txt, /sitemap.xml, /llms.txt, /.well-known/* discovery files, and script files, made to that site only | During an audit you started. |

Both external lookups are off by default and clearly labeled in Settings. The semantic
AI model ships inside the extension and is never downloaded.

Export report: When you choose Export, the extension writes a PDF, JSON, or
Markdown file of the persisted audit report to your computer. That file can include
private paths, query strings, cookie names, package versions, and other technical
evidence. URL credentials and fragments are stripped. Script bodies and credential
values are not included. The extension does not upload the export; sharing the file
is a separate action you take outside the extension.


The use of information received by Arg Architect adheres to the Chrome Web Store User
Data Policy, including the Limited Use requirements:

• Data is used only to provide or improve the single purpose stated above.
• Data is never sold or shared, except as necessary to provide the service, comply with
  law, or enforce our policies.
• Data is never used for advertising or behavioral targeting.
• Access to data is limited to what is required for the feature you enable.

All transmissions are over HTTPS. The extension stores audit data locally on your
device using the browser's extension storage. You can remove all data by clearing the
extension's history in the History tab or by removing the extension.


Audit reports use a seven-day local retention window, with a maximum of ten reports per
exact audited URL. Expired reports are removed during report-storage maintenance, and
storage quota failures do not evict existing reports. Reports from an incompatible
extension version are not deleted because of that incompatibility; they remain available
for explicit deletion until normal maintenance removes them.
Settings persist until you clear extension data or uninstall the extension. We operate
no server that retains your audit history.


Arg Architect is a developer tool and is not directed at children.


If this policy changes materially, we will update the effective date and, where
practical, notify users via a note in the extension.


Questions? Use the in-app Contact form or email dev@arg.software.