← Back to Product Home 100% Read-Only Client Inspection
Developer Tool Privacy

Privacy Policy

LaraLens is a client-side inspection tool for Laravel and Inertia.js web applications. We do not collect, intercept, or transmit any application cookies, tokens, or session state to external servers.

Effective Date: October 29, 2026 • Version 1.0.0 • MIT License
🚫

Zero Data Telemetry

No analytics beacons, no tracking pixels, and no remote transmissions of inspected code or cookies.

💾

Strictly Local Storage

User preferences (pinned tabs, theme, route filter history) are saved strictly in chrome.storage.local.

⚡

Read-Only Inspection

Inspects CSRF meta tags, Inertia props, and Ziggy routes locally in your active tab's runtime memory.

🛡️

No Remote Scripts

Contains zero CDN scripts or remote code. Fully compliant with Chrome Web Store and Edge policies.

01. Introduction & Purpose

This Privacy Policy explains how LaraLens - Laravel & Inertia.js DevTools ("we", "our", or "the extension") handles data across Microsoft Edge, Google Chrome, and compatible Chromium browsers.

LaraLens is designed for Laravel software developers to inspect CSRF tokens, session cookies, Inertia.js props, and Ziggy routes in real time. The extension works entirely inside your browser's client-side sandbox. It functions as a read-only inspector for your active tab and never uploads your application data, passwords, or session cookies to any remote third-party server.

02. Data We Never Collect

We do not collect, intercept, store on remote servers, or sell any user information. Specifically, LaraLens does NOT collect:

  • Session Cookies & CSRF Tokens: Cookies read for developer inspection (such as XSRF-TOKEN and laravel_session) are presented only in the extension popup on your screen and are never transmitted across the network.
  • Inertia.js Props & Component State: Data extracted from window.__page remains exclusively in local memory.
  • Browsing Activity & Visited URLs: We do not log or track your browsing history or visited domains.
  • Personally Identifiable Information (PII): No names, email addresses, or user profiles are collected.
  • Analytics & Telemetry: We do not embed Google Analytics, Sentry, Mixpanel, or third-party tracking scripts.

03. Data Stored On Your Local Device

LaraLens uses chrome.storage.local solely to preserve your developer UI preferences:

  • UI Preferences: Default inspector tab (e.g., Inertia vs Routes vs Cookies).
  • Filter & Search Queries: Route filter keywords and search queries entered in the Ziggy routes viewer.
  • Pinned Panels: Panels or tabs you have pinned for quick access.
💡 Resetting Preferences: You can clear all saved settings at any time by clearing extension data in your browser settings or uninstalling the extension.

04. Browser Permissions Justification

LaraLens adheres to the Least Privilege Principle and requests only the permissions strictly required to inspect Laravel web applications:

Permission Scope Why It Is Strictly Required
activeTab Active Tab Inspection Required to inspect the DOM of the active webpage for Laravel CSRF meta tags, Inertia page props, and page headers when you open the popup.
cookies Cookie Attribute Auditing Required to read session cookies (laravel_session, XSRF-TOKEN) for the active domain only, allowing developers to verify HttpOnly, Secure, and SameSite security flags. Cookies are never transmitted anywhere.
storage Local Sandbox Storage Required to persist UI preferences, route filter criteria, and theme settings locally on your machine.
scripting Bridge Script Execution Required to run page-bridge.js to read page-context variables like window.__page and Ziggy route tables.
host_permissions (<all_urls>) Cross-Origin Dev Inspection Allows developers to audit Laravel applications running across diverse local development environments (localhost, 127.0.0.1, *.test) as well as remote staging/production domains.

05. Remote Code Compliance

LaraLens complies fully with Manifest V3 security standards:

  • Zero remote code execution. No scripts or libraries are downloaded dynamically from external CDNs or servers.
  • All assets, bridges, styles, and parsers are 100% packaged inside the extension zip file.

06. Third-Party Disclosure

LaraLens does not sell, trade, or transfer any user information to outside parties. Because all inspection occurs locally in your browser, no third party has access to your data.

07. Data Retention & Erasure

We do not operate external user databases or accounts. All data is stored strictly in your browser. Uninstalling the extension permanently erases all saved preferences.

08. User Rights (GDPR & CCPA)

Under GDPR and CCPA, you retain complete rights over your information. We collect no personal data, profile no users, and provide immediate deletion simply by clearing browser data or uninstalling.

09. Children's Privacy (COPPA)

LaraLens is a developer inspection utility and does not collect personal data from anyone, including children under the age of 13.

10. Contact & Open Source Information

LaraLens is open source and licensed under the MIT License. If you have any questions or feedback regarding this policy, please reach out via GitHub:

Developer: Sakhawat Hossain

Portfolio & Website: https://sajusun.github.io

GitHub Repository: github.com/sajusun/laralens

Microsoft Edge Add-on: LaraLens on Microsoft Edge Store

Support & Feedback: Submit an Issue on GitHub