Back to Home

Last Updated: January 11, 2026

Introduction

RequestWala ("we," "our," or "the extension") is a Chrome DevTools extension designed to help developers record, track, and share API calls during web development. We are committed to protecting your privacy and being transparent about our data practices.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

1. API Request Data

When you actively use the recording feature, we collect:

  • Request Information: HTTP methods (GET, POST, etc.), URLs, request headers, request body content
  • Response Information: HTTP status codes, response headers, response body content
  • Timing Data: Request duration, DNS lookup time, connection time, TLS setup time, time to first byte, content download time
  • Metadata: Timestamps, source domain where the request originated

Important: This data is only collected when you explicitly start recording by clicking the record button. No data is collected when the extension is not actively recording.

2. Authentication Information

When you choose to save recordings, we collect:

  • Google Account Information: Email address, name, profile picture (via Google OAuth)
  • Authentication Tokens: Session tokens to maintain your logged-in state

3. Local Storage Data

  • Recorded API requests stored locally in your browser
  • User authentication state and preferences

How We Collect Information

DevTools API

We use Chrome's DevTools Network API (chrome.devtools.network.onRequestFinished) to capture XHR and Fetch requests. This API only provides access to requests made by websites you are actively debugging in DevTools.

Google OAuth

We use Google OAuth 2.0 for secure authentication. When you sign in, you are redirected to Google's authentication page. We only receive the information you authorize Google to share with us.

Local Storage

We use Chrome's local storage API (chrome.storage.local) to save recorded requests and authentication state on your device.

How We Use Your Information

Core Functionality

  • Recording: To capture and display API requests during your development sessions
  • Storage: To persist recorded data locally so you can review it after closing DevTools
  • Export: To format and copy request data to your clipboard for documentation purposes
  • Sharing: To save recordings to our backend service when you explicitly choose to share them

Authentication

  • To verify your identity when saving recordings
  • To associate saved recordings with your account
  • To generate permanent shareable links for your recordings

Security

  • To automatically redact sensitive information (authorization headers, API keys, cookies, tokens) before display or export
  • To maintain secure communication with our backend service

Data Storage and Retention

Local Storage (Browser)

  • Recorded API requests are stored locally in your browser
  • Data persists until you clear it using the "Clear All" button or clear Chrome's site data
  • We do not have access to data stored only on your device

Backend Storage (When You Save Recordings)

  • When you explicitly save a recording, it is transmitted to our backend server at request-wala.whisperyourwish.com
  • Saved recordings are stored securely and made accessible via permanent public links
  • You can delete your recordings by contacting us (see Contact Information below)
  • We retain saved recordings indefinitely unless you request deletion

Data Sharing and Third Parties

Third-Party Services We Use

Google OAuth (accounts.google.com)

Public Sharing

  • When you save a recording, it becomes accessible via a permanent public link
  • Anyone with the link can view the recording
  • Do not save recordings containing sensitive production data or credentials

No Selling of Data

  • We do not sell, rent, or trade your personal information to third parties
  • We do not use your data for advertising purposes
  • We do not share your data with third parties except as described in this policy

Data Security

We implement security measures to protect your information:

  • Automatic Redaction: Sensitive headers (authorization, cookie, api-key, tokens, session data) are automatically replaced with [REDACTED]
  • HTTPS Encryption: All communication with our backend uses HTTPS/TLS encryption
  • Secure Authentication: Google OAuth with session-based security
  • No Plain-Text Credentials: We never store or transmit plain-text passwords

User Responsibility: You are responsible for reviewing recordings before saving/sharing them to ensure no sensitive information is included.

Your Rights and Choices

Access and Control

  • View Data: All recorded data is visible in the extension interface
  • Delete Local Data: Use the "Clear All" button to delete locally stored recordings
  • Export Data: Use the copy/export features to retrieve your data
  • Account Deletion: Contact us to delete your account and associated recordings

Opt-Out Options

  • Stop Recording: Click the record button to stop capturing requests at any time
  • Don't Save: You can use the extension locally without saving recordings to our backend
  • Uninstall: Removing the extension deletes all locally stored data

Do Not Track

As a development tool, this extension does not track your browsing activity. It only monitors API requests from websites you are actively debugging with DevTools open.

Chrome Permissions Explained

Our extension requests the following permissions:

  • storage: To save recorded requests and authentication state locally in your browser
  • clipboardWrite: To copy formatted request data to your clipboard for export
  • tabs: To manage OAuth authentication windows and open saved recording links

We do not request:

  • Browsing history access
  • Access to all websites
  • Access to your files or downloads

Children's Privacy

This extension is intended for use by software developers and is not directed at children under 13. We do not knowingly collect information from children under 13.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the extension after changes constitutes acceptance of the updated policy.

We will notify users of significant changes through:

  • Chrome Web Store update notes
  • In-extension notifications

Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your information includes:

  • Consent: You explicitly choose to start recording and save recordings
  • Contract: Processing is necessary to provide the service you requested
  • Legitimate Interests: To improve and secure our service

Your GDPR Rights (EEA Users)

If you are in the EEA, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with your supervisory authority

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect
  • Know whether we sell or disclose your personal information
  • Opt-out of the sale of personal information (we do not sell data)
  • Request deletion of your personal information
  • Non-discrimination for exercising your privacy rights

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users within 72 hours via email and/or in-extension notification, as required by applicable laws.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

For data deletion requests, account inquiries, or privacy concerns, please email us with "Privacy Request" in the subject line.

Consent

By installing and using RequestWala, you consent to:

  • The collection and use of information as described in this Privacy Policy
  • The automatic redaction of sensitive headers (you are responsible for reviewing data before saving)
  • Public sharing of recordings you explicitly choose to save

You can withdraw consent at any time by uninstalling the extension and requesting deletion of your saved data.

Note: This privacy policy applies to the RequestWala Chrome extension. Third-party services (such as Google OAuth) are governed by their own privacy policies.