Privacy Policy for Wait, That’s Prod!

Wait, That’s Prod! is engineered with a strict privacy-first, zero-exfiltration philosophy. This extension does not collect, track, monetize, or transmit your personal data, credentials, internal infrastructure information, or browsing history.

1. Data Collection & Transmission

• Zero External Data Transmission: Wait, That’s Prod! does NOT collect, store, or transmit any personally identifiable information, browsing history, company URLs, or analytics to any external server or third-party service. It operates 100% offline with zero network requests (0 fetch(), 0 XMLHttpRequest, 0 WebSocket).
• No Form or Credential Harvesting: Content scripts only inspect the text labels of interactive buttons to detect destructive actions. Wait, That’s Prod! never reads, captures, or transmits passwords, tokens, form inputs, or page text.
• 100% Local Processing: All user-defined environment rules, custom danger keywords, theme customizations, and audit event logs are stored exclusively on your local device using standard browser local storage (chrome.storage.local).
• Zero Telemetry / Analytics: The extension contains zero tracking pixels, analytics scripts, advertising libraries, or telemetry code.

2. Permissions Justification

• Storage (storage): Used solely to save your environment rules, danger keywords, visual preferences (colors, border styles), and safety audit logs locally on your machine.
• Tabs (tabs & activeTab): Used to evaluate active tab URLs against your configured environment patterns, prepend environment tags (such as [PROD]) to the browser tab title for at-a-glance awareness, and enable one-click environment tagging from the toolbar popup.
• Scripting (scripting): Used to inject ambient protective borders, the floating status pill, and the FUSE button interceptor onto pages that match your configured environment rules.
• Host Permissions (*://*/*): Required exclusively to detect your configured domains (e.g. AWS console, cloud dashboards, internal staging sites) and apply visual guards and destructive button protection automatically upon page load. No webpage data, session cookies, or network requests are inspected, extracted, or transmitted off your device.

3. Data Portability & Deletion

• Full Ownership: You own your configuration completely. You can export and import your entire setup as a clean JSON file at any time from the Settings dashboard.
• Instant Deletion: Deleting rules or clearing your audit log via the extension settings, or uninstalling the extension from your browser, immediately and permanently removes all stored data from your device.

4. Contact

For any questions regarding this privacy policy or the extension, contact:

• Developer: yankit.dev