Legal

Privacy Policy

Last updated: April 14, 2026

1. Summary

vtexSnitch is a free, open-source Chrome side-panel extension for inspecting VTEX storefronts. It runs entirely on your machine. We do not operate any server, we do not have user accounts, we do not ship analytics or telemetry, and we do not transmit your data anywhere. If you uninstall the extension, every byte it created is gone.

2. What vtexSnitch reads

When you open the side panel on a VTEX storefront, the extension reads public runtime data that the page itself exposes in the browser:

  • VTEX storefront metadata (account name, workspace, sales channel, currency, arch)
  • Public OrderForm state for your own session
  • Network requests made by the page (method, URL, status) via the DevTools network API and patched fetch/XHR
  • Seller and stock information returned by the store's own public APIs
  • Meta/SEO tags, loaded scripts, and tracker pixels visible in the DOM

All of this information is processed in memory in your browser and displayed in the side panel. None of it is transmitted to us.

3. What vtexSnitch stores

Using chrome.storage.local, the extension stores only:

  • Your UI preferences (active tab, theme, toggles)
  • Cached detection results for the current tab (cleared when you close the browser or clear extension storage)

This data never leaves your device.

4. What vtexSnitch does NOT collect

  • Your browsing history or URLs of sites you visit outside of VTEX storefronts
  • Personal information (name, email, address, phone)
  • Payment or financial data — there is no paid plan
  • Keystrokes, form contents, or screenshots
  • Authentication tokens, cookies, or credentials
  • Analytics, usage metrics, or crash reports
  • Any data from non-VTEX sites (the side panel does nothing on them)

5. Permissions and why they exist

  • sidePanel — to render the vtexSnitch UI
  • scripting / activeTab / tabs — to inject the content scripts that read VTEX runtime data on the current tab
  • storage — to save your UI preferences locally
  • cookies — to read vtex_session / vtex_segment from the current storefront so the panel can correlate requests you can already see in DevTools
  • host_permissions: <all_urls> — required so the extension can detect VTEX storefronts regardless of domain. On non-VTEX pages the content script exits immediately and does nothing.

6. Third parties

vtexSnitch has zero third-party integrations. No SDKs, no analytics, no error tracking, no remote code loading. The only outbound requests the extension makes are the ones your own browser would already make to the VTEX store you're inspecting.

7. Open source

vtexSnitch is released under the MIT license. The entire source code is available for audit at github.com/rheav/vtex-snitch.

8. Children

vtexSnitch is a developer tool and is not directed to children under 13. We do not knowingly collect data from anyone, including children.

9. Changes to this policy

If we meaningfully change how the extension handles data, we will update this page and bump the "Last updated" date above. Continued use of the extension after the update means you accept the revised policy.

10. Contact

Questions about privacy? Open an issue on GitHub or message the author on LinkedIn.