Privacy Policy
Last updated ·
Summary
The extension does not collect, does not store on a server, and does not transmit any of your data. There is no server: everything happens inside your browser.
What the extension accesses
To do its job, the extension reads data from the tab you are looking at:
- Page content — SEO tags, structured data, loaded scripts and the variables the store publishes, in order to identify the VTEX technology and the page type.
- Cookies for the domain — to report whether a store or admin session exists. Cookies are read only from the active tab’s domain and from the admin domain of the detected account.
- The store’s public APIs — the extension queries the catalog and session APIs of the very site you are visiting, from that page itself.
All of it is read on demand, when you open the panel, and discarded when the panel closes.
Fetch runner
Requests you fire from the fetch runner leave from the active tab, to that tab’s domain, with the cookies that tab already has. The extension does not act as an intermediary, does not log them, and does not copy those responses anywhere.
The request history lives in the browser’s session memory and is erased when the browser closes.
Session tokens
The session feature writes an authentication cookie to the domain you choose, from a token you paste yourself or copy from another domain of the same account.
The token is never written to disk by the extension. It exists only in the panel’s memory while the panel is open. It is not saved to storage, not synced across devices, and never leaves your machine.
What is stored locally
Only preferences and working state, in the browser’s local storage:
- The development server port and the state of the preview redirect
- The panel tab you were last on
- The last preview URL captured, per tab
- The fetch runner form and history, for the duration of the browser session
None of it contains credentials, and none of it is sent outside the browser.
Permissions
The extension requests fixed access only to *.myvtex.com and localhost. Access to store domains is optional and granted by you, site by site, by clicking “Grant access to this site”.
Contact
Questions or problems: open an issue on the repository.