Privacy policy

Last updated: June 18, 2026

Sift is a read-only viewer for HTTP capture files (HAR, Fiddler SAZ, and Charles). This policy describes what data the software handles. The short version: it handles your capture files locally and collects nothing.

Single purpose

Sift opens HTTP capture files and displays them in a read-only, in-memory inspector. That is its only function. It does not capture, proxy, intercept, or modify network traffic.

Data we collect

None. Sift does not collect, store, transmit, share, or sell any personal data, usage data, or capture contents. There is no account, no sign-in, and no server operated by this project that your data reaches.

How your files are handled

• Capture files you open are read into memory, parsed, and rendered in the page.
• The data is discarded when the panel or page is hidden, closed, or reloaded. It does not persist across reloads.
• No browser storage is used: no localStorage, no sessionStorage, no chrome.storage, no IndexedDB, and no Cache API.
• The only file Sift can produce is a sanitized HAR export, which is a download you explicitly start. It is created in memory and never written or sent automatically.

Network access

Sift makes no outbound network requests of any kind. There is no telemetry, no analytics, no error reporting, and no remote configuration. Its pages declare a content security policy with connect-src 'none', so the browser blocks network connections from the extension.

Permissions

The extension requests no permissions and no host_permissions. The only manifest entry that integrates with the browser is devtools_page, which is required to register the DevTools panel and grants no access to page content, tabs, or network data. Because Sift has no host permissions, it cannot read your browsing or the pages you visit.

Remote code

No remote or dynamically loaded code is executed. All code ships inside the package, and the content security policy permits only first-party scripts and forbids eval.

Children

Sift is a developer tool that collects no data from anyone, including children.

Changes to this policy

If this policy changes, the updated date above will change with it. Because Sift collects nothing, material changes would only ever arise from a change in the software itself, which is open source and auditable.

Contact

Sift collects no data, so there is nothing to request, correct, or delete. Questions about the software, including its privacy behavior, can be raised on the project's source repository at github.com/jacksonfdam/Sift.