Header Relay

Permissions

HTTP localhost access is included for the default local-development workflow. Every other host is requested only when you add its Target Origin. Capture and attachment remain limited to enabled profiles and configured origins.

Extension data stays local

Profiles, session state, and audit logs are not sent to the developer or an unrelated data service. Configured header values are attached only to matching target origins.

Clear retention limits

Diagnostic audit logs keep up to 1,000 recent entries for no more than 7 days, and can be cleared at any time.

No persistent URL logging

Request URLs are never written to persistent audit logs. The current browser session keeps only the origin and pathname for recent-log display.

User-controlled scope

Disable a profile, remove target origins, clear captured values, or uninstall the extension to stop its behavior.