This add-on collects nothing and sends us nothing. It has no analytics, no telemetry, and no server of its own.

What it does. The ToolsTray API Client is a tool for sending HTTP requests. A web page is not allowed to send some of them, so this add-on sends them instead: it receives a request from that page, sends it to the address you typed, and hands the reply back. That is its only function.

What it handles, and for how long. Request and response contents pass through the add-on in memory for the duration of the request and are then discarded. This includes anything you put in a request, such as an Authorization header or a username and password for Digest or NTLM authentication. None of it is written to disk, kept after the request finishes, or transmitted anywhere except the address you asked for.

What it stores. Nothing. The add-on uses no storage API of any kind.

Permissions. It holds no site permissions when you install it. The first time a request needs an address, it asks you for that one address, and you can withdraw any of them from your browser's extensions page at any time.

Where data goes. Only to the server you name in the request. It never reaches ToolsTray, and it is never shared with a third party.

Full site policy: https://toolstray.com/privacy