the allow cors extension operates entirely on your local machine. it does not collect, record, transmit, or transmit any personally identifiable information (pii), web history, or network request payloads.

all header modifications and request redirections are executed natively inside your browser's local sandbox using the chrome declarativeNetRequest rules engine.

settings config (including enabled status, custom lists, exclusions, and redirect mappings) are stored locally in your chrome profile directory via chrome.storage.local. this data is never synchronized to external servers or accessible to third parties.

the extension requests the following permissions strictly to execute its features locally:

• declarativeNetRequest: to modify headers and redirect requests.
• storage: to persist user-configured rules.
• tabs: to detect active hostnames for origin reflection.
• webRequest: to increment the modified request counter.
• alarms: to schedule background auto-disable alarms.

this privacy policy may be updated to reflect changes in chrome policies or extension capabilities. updates will be committed directly to the github repository.