API Lens — Privacy Policy

Last updated: November 6, 2026

API Lens is a Chrome extension published by Edge Agency ("we", "us"). This policy explains what data the extension handles and what it does not.

The short version

API Lens has no servers, no analytics, and no user accounts. Everything it records stays in your own browser, on your own machine. We never receive, see, or store your data.

What the extension records

Recording is off by default and is per-tab. Only when you press the Record button on a specific tab does API Lens capture that tab's network activity: request and response URLs, methods, headers, bodies, status codes, and timing for fetch, XMLHttpRequest, and sendBeacon calls made by that page — the same information visible in Chrome DevTools' Network panel.

Captured data is processed locally to group calls into endpoint templates, infer schemas, and generate exports (OpenAPI specs, typed client code, HAR files). Sessions you choose to save are stored in Chrome's local extension storage (chrome.storage.local) on your device only.

What leaves your device

By default: nothing. The extension makes no network calls of its own.

The single exception is the optional "AI enhance" feature. If — and only if — you enter your own OpenRouter API key and explicitly run AI enhance, the extension sends endpoint shapes to OpenRouter: endpoint names, field names and types, and counts. It never sends credential values, authorization headers, cookies, or request/response body values. Your OpenRouter key is stored only in your browser and is used only for calls you initiate.

Secrets and redaction

Exports redact secrets by default: Authorization headers, cookies, API-key headers, and password/token fields are replaced with a redaction marker. Raw values appear in an export only if you deliberately enable the "include secrets in exports" option.

What we do not do

• We do not collect, transmit, sell, or share your data with any third party.
• We do not use your data for advertising, marketing, or credit purposes.
• We do not track your browsing history. Tabs you have not chosen to record are never captured.
• We do not operate any server that receives data from the extension.

Your control

You can stop recording at any time, delete saved sessions from within the extension, and remove all locally stored data by uninstalling the extension or clearing its storage in Chrome settings.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new "last updated" date.

Contact

Questions: hello@agencylead.ca