Privacy Policy — Arg Architect
Arg Architect is a website-auditing tool for developers. It analyzes the page you are currently viewing or a URL you enter, entirely inside your browser. Audits run in a separate runner window the extension opens; the extension does not read or change the pages you browse normally. This policy describes what data the extension handles and what, if anything, leaves your device.
1. Single purpose
Arg Architect produces a technical audit report (performance, security, architecture, payload, accessibility, DOM, and AI readiness findings) for the website the user chooses to audit.
2. Data processed locally (never transmitted)
When you run an audit, the extension reads information from the audited page and your browser to compute the report. Its page collectors are registered only for the audited site and only while the audit runs; they are removed when the audit queue finishes. This processing happens only on your device:
- Website content evidence: DOM structure and summaries, meta tags, scripts, style classes, link relations, page text samples, JSON-LD, and response headers of the audited document.
- Network evidence: request URLs, resource timings, sizes, and response headers observed for the audited page load.
-
Storage evidence:
localStorage/sessionStoragekey names, and cookie names and values visible to the page (document.cookie). Cookie values are inspected transiently in memory to detect authentication token patterns (e.g. expired JWTs); they are not included in saved reports. -
Cookie security attributes (opt-in): if you explicitly enable "Deep
cookie inspection" and grant the optional browser permission, the extension reads cookie
names and security attributes (
Secure,HttpOnly,SameSite, domain, path) of the audited site via the browser cookie store. Cookie values are never read in this flow, and the data is used only to produce the audit report locally. - Audit history: scores, findings, and evidence lines (e.g. flagged resource URLs, cookie names) are stored in the extension's local storage on your device so you can review past audits. You can delete any or all history at any time.
No page content, cookies, storage data, or audit results are uploaded to any server. No analytics, tracking, or advertising code is present in the extension.
3. Data that may leave your device (user-initiated or opt-in only)
| Flow | What is sent | When |
|---|---|---|
| Contact form | The name, email address, and message you type in the Contact tab, plus, only if you attach one, a short audit summary (site origin, scores, category verdicts, up to eight check names) |
Only when you press "Send". Transmitted over HTTPS to
api.web3forms.com (form-handling provider).
|
| External CDN lookup (optional) | The hostname of the audited site only |
Only when you enable "External CDN lookup". Sent over HTTPS to
dns.google (DNS-over-HTTPS) and rdap.org.
|
| AI discovery lookup (optional) | The hostname of the audited site only |
Only when you enable "External AI discovery lookup". Sent over HTTPS to
dns.google.
|
| Audited site's public files |
Normal HTTPS requests for the audited site's own /robots.txt,
/sitemap.xml, /llms.txt, /.well-known/*
discovery files, and script files, made to that site only
|
During an audit you started. |
Both external lookups are off by default and clearly labeled in Settings. The semantic AI model ships inside the extension and is never downloaded.
Export report: When you choose Export, the extension writes a PDF, JSON, or Markdown file of the persisted audit report to your computer. That file can include private paths, query strings, cookie names, package versions, and other technical evidence. URL credentials and fragments are stripped. Script bodies and credential values are not included. The extension does not upload the export; sharing the file is a separate action you take outside the extension.
4. Limited Use
The use of information received by Arg Architect adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:
- Data is used only to provide or improve the single purpose stated above.
- Data is never sold or shared, except as necessary to provide the service, comply with law, or enforce our policies.
- Data is never used for advertising or behavioral targeting.
- Access to data is limited to what is required for the feature you enable.
5. Security
All transmissions are over HTTPS. The extension stores audit data locally on your device using the browser's extension storage. You can remove all data by clearing the extension's history in the History tab or by removing the extension.
6. Retention
The extension keeps up to 30 saved audit reports on your device. Reports do not expire and are never deleted automatically: when the limit is reached, new audits are blocked until you delete reports in the History tab. If browser storage is full, the new report is not saved and existing reports are kept. Reports from an incompatible extension version are not deleted because of that incompatibility; they stay listed until you delete them. Settings persist until you clear extension data or uninstall the extension. We operate no server that retains your audit history.
7. Children's privacy
Arg Architect is a developer tool and is not directed at children.
8. Changes
If this policy changes materially, we will update the effective date and, where practical, notify users via a note in the extension.
9. Contact
Questions? Use the in-app Contact form or email dev@arg.software.