Last updated: August 20, 2026
HeaderForge runs entirely in your browser. Your rules never leave your machine. We collect no browsing data, no analytics, and no telemetry of any kind.
Your header rules (header names, values, URL patterns) are stored locally in your browser using chrome.storage.local. They are never transmitted to us or anyone else.
If you choose to activate HeaderForge Pro, the extension sends your license key — once, when you click "Activate" — to Lemon Squeezy (our payment provider, lemonsqueezy.com) to verify it. This is the only outbound network request the extension makes, and it only happens at your explicit action. Your email address, if returned by Lemon Squeezy during validation, is stored locally to display your license status.
HeaderForge requests access to all websites (<all_urls>) for one reason only: modifying HTTP headers requires the browser's network-layer permission on the sites you target. Header rules are applied locally by Chrome itself; the extension does not read page content.
Questions: sapirsoftware@gmail.com