Privacy Policy

This Privacy Policy describes how the Ramesh SharePoint REST API Explorer browser extension ("Extension", "we", "our") handles your information. This Extension is a developer productivity tool designed to help users browse SharePoint lists, document libraries, permissions, and generate/test REST API queries against Microsoft SharePoint environments.

By installing or using this Extension, you agree to the practices described in this policy. If you do not agree, please uninstall the Extension from your browser.

The Extension does not collect, transmit, log, or store any of the following:

• Personal identifiable information (name, email, phone number)
• Microsoft account credentials or passwords
• OAuth tokens or access tokens beyond your local device
• SharePoint site contents, list data, or file contents
• Browsing history or visited URLs
• Usage analytics or telemetry
• Crash reports or diagnostic data sent to any external service

To provide its functionality, the Extension stores the following information locally on your device using the browser's built-in chrome.storage.local API. This data never leaves your machine:

• SharePoint site URLs you have configured in the Extension
• Saved REST API query templates and configurations
• User interface preferences and settings
• OAuth access tokens issued by Microsoft (for authenticated API calls)

You can clear all locally stored data at any time by using the "Clear Settings" option within the Extension dashboard, or by removing the Extension from your browser entirely.

When you execute a REST API query using this Extension, the HTTP request is made directly from your browser to the target Microsoft SharePoint or Azure Active Directory endpoint. The data flow is:

• Your browser → Microsoft SharePoint / Azure AD (direct connection)
• No proxy servers, relay servers, or third-party services are involved
• No request payloads or responses are logged or forwarded by the Extension
• Your authentication tokens are sent only to Microsoft's own endpoints

The Extension requests the following browser permissions. Here is exactly why each is needed:

Permission	Reason Required
storage	Save your SharePoint site configurations, query templates, and preferences locally on your device using chrome.storage.local.
identity	Authenticate with Microsoft Azure AD via OAuth 2.0 to obtain access tokens for calling SharePoint REST APIs on your behalf.
scripting	Inject scripts into the active SharePoint page tab to read the current site URL and context information needed to generate accurate API queries.
activeTab	Access the currently active browser tab to detect the SharePoint site you are visiting, so the Extension can auto-populate the site URL field.
host: *.sharepoint.com	Allow the Extension to interact with SharePoint Online domains to execute REST API queries and retrieve site metadata.

The Extension communicates only with Microsoft-owned services as part of its intended functionality:

• Microsoft SharePoint Online (*.sharepoint.com) — for REST API queries
• Microsoft Azure Active Directory — for OAuth 2.0 authentication

No data is shared with any other third parties, advertisers, analytics providers, or data brokers. The Extension does not include any tracking scripts, advertising SDKs, or telemetry libraries.

Since all data is stored locally using the browser's native chrome.storage.local API, its security is governed by your browser and operating system's security model. We recommend:

• Keeping your browser updated to receive the latest security patches
• Locking your computer when leaving it unattended
• Using a personal device rather than a shared device for accessing sensitive SharePoint data

This Extension is a developer productivity tool intended for professional use by adults and enterprise users. It is not designed for, directed at, or intended to be used by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect any information from children.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and release a new version of the Extension via the browser extension store. We encourage you to review this policy periodically.

Continued use of the Extension after changes are posted constitutes your acceptance of the revised policy.

Because we do not collect any personal data, there is no data to access, correct, or delete from our side. You retain full control over locally stored Extension data, which you can clear at any time via:

• The Extension's built-in settings/clear options
• Your browser's extension management page → "Clear site data"
• Uninstalling the Extension from your browser