Privacy Policy for HackTools++

Last updated: 25 Feb 2026

Overview

HackTools++ ("the Extension") is a Chrome extension that provides a security testing toolkit inside Chrome DevTools, including Repeater, Intruder, Decoder, Scanner, Tech Detector, and OWASP Finding. This privacy policy explains how the Extension handles user data.

Data Collection

The Extension does not collect, store, or transmit any personal data to external servers.

All data is processed and stored locally on your device:

Captured requests: Displayed in the extension panel; not sent to any server
Scope/Block lists: Stored in Chrome's local storage on your device
Saved requests: Stored locally in Chrome storage (if used)
Tech detection / OWASP analysis results: Generated and displayed locally in DevTools; not transmitted externally

Permissions

The Extension requests the following permissions:

Permission	Purpose
storage	Save scope/block domain lists and user preferences locally
scripting	Run scanner and technology checks in the inspected page context
cookies	Include cookies when replaying requests (user-initiated)
host_permissions: <all_urls>	Replay requests to user-specified targets and capture responses in DevTools

None of these permissions are used to collect or transmit data to third parties.

Data Use

Requests are captured only when the user has the DevTools HackTools++ panel open
Replayed requests are sent directly from the extension to the target URL (user-initiated)
Tech Detector and OWASP Finding process data locally to generate findings in the DevTools UI
No analytics, tracking, or telemetry is used

Third-Party Sharing

The Extension does not share any data with third parties.

Security

All processing happens locally in your browser
No data is sent to external servers
No remote code is executed

Changes

We may update this privacy policy from time to time. The "Last updated" date at the top will reflect any changes.

Contact

For questions about this privacy policy, please contact kumarsachin1642001@gmail.com.