Privacy Policy

Last updated: March 26, 2026

Bearer Token Grabber is a Chrome extension built by Emad Khan. This policy explains how the extension handles your data.

Data Collection

The extension intercepts HTTP requests made by web pages you visit and captures the following data only when an Authorization header with a Bearer token is present:

• The Bearer token value
• The request URL where the token was sent
• The domain name derived from the request URL
• A timestamp of when the token was captured

Data Storage

• Session storage only: Captured tokens are stored in chrome.storage.session, which is automatically cleared when the browser session ends or the tab is closed.
• Local preferences: Only two user preferences are stored persistently — your theme choice (light/dark) and the auto-copy toggle state. No token data is ever persisted.
• No external transmission: All data stays entirely within your browser. Nothing is sent to any server, API, or third party.

Data Sharing

We do not collect, share, sell, or transmit any data to external parties. The extension operates entirely offline and locally within your browser.

Permissions

• scripting: Required to read captured tokens from the active tab and to enable the keyboard shortcut copy feature.
• activeTab: Required to identify and interact with the currently active browser tab.
• storage: Required to store user preferences (theme, auto-copy) and session token data.

User Controls

• You can delete individual tokens or clear all history from the extension popup.
• All tokens are automatically cleared when the tab or browser session ends.
• You can disable or uninstall the extension at any time from chrome://extensions.

Security

Bearer tokens are sensitive credentials. This extension stores them only in session-scoped storage and never transmits them externally. However, you are responsible for ensuring tokens copied to your clipboard are handled securely.

Changes to This Policy

If this policy is updated, the changes will be reflected on this page with an updated date.

Contact

For questions or concerns about this privacy policy, contact Emad Khan.