Http Security Header Checker

Introduction

Thank you for using HTTP Security Header Checker, a Google Chrome extension that checks if a web page includes the recommended HTTP Security Headers based on the latest OWASP guidelines. We are committed to protecting your privacy and ensuring transparency about how your information is collected and used.

Information We Collect

HTTP Security Header Checker does not collect, store, transmit, or share any personally identifiable information (PII). The extension operates entirely within your browser and only accesses and processes information necessary to fulfill its core functionality.

How the Extension Works

Access to Headers: The extension analyzes HTTP response headers of web pages you visit. This information is used solely to display the presence of recommended security headers in the extension’s popup window.
No Data Collection: All header information accessed by the extension remains within your browser and is not transmitted to external servers, stored, or shared with third parties.

Permissions Used

HTTP Security Header Checker requires certain permissions to function correctly:

Active Tab & Web Navigation: These permissions allow the extension to access HTTP headers of the currently active tab and analyze them based on OWASP guidelines.
Web Request: This permission is used to monitor HTTP requests and capture response headers. It does not collect any personal information or track user activity beyond the immediate functionality of the extension.

How We Protect Your Information

We have implemented technical measures to ensure that no personal data is collected or shared. All operations are confined to your local browser, ensuring that the extension operates without transmitting data outside your browser.

Third-Party Links

The extension provides direct links to the OWASP HTTP Headers Cheat Sheet for educational purposes. Please be aware that external websites may have their own privacy policies, and we are not responsible for the content or practices of these sites.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the Effective Date at the bottom of this Privacy Policy. You are advised to review this policy periodically for any changes.

If you have any questions about this Privacy Policy, please contact us at briangerhards@gmail.com.

Effective Date: 10/19/2024