Summary
Short version: inspecting pages, finding locators and generating code all happen inside your browser. The only data that reaches our servers is what is needed to sign you in and to check whether your trial or lifetime access is active. Nothing about your API calls or timings is saved or sent anywhere. We do not sell your data and we do not run advertising.
This policy covers the TestMaadu Smart Inspector Chrome extension (“TestMaadu”, “the extension”) and this website. They are operated by Kaushik VM, an individual trading as TestMaadu, based in Bengaluru, India, who is the data controller. Questions go to kaushik.v2802@gmail.com.
Data that stays on your device
When you use Find Element, API Automation or API Performance, the extension reads the page you chose to inspect: element attributes, text and structure. For API Automation and API Performance it also reads the network requests and responses captured from that page: URLs, headers, request and response bodies, the response timings Chrome records, and, only when you turn on “replay captured authentication”, the cookies that matter for that request.
That data is used to generate code inside your browser. It is not sent to TestMaadu or to any third party. Generated code is copied only when you click Copy.
We do not store your API data anywhere, and we do not send it anywhere. Nothing about your API calls (requests, responses, headers, timings or generated code) is saved to local storage, a file or a database, and none of it is sent to any server. The call you select is held only in temporary browser memory (chrome.storage.session) while you work, and it is cleared when you refresh the page, close the tab or close the browser.
Secret values such as authorization headers and cookies are written into generated code as environment-variable references by default. You choose whether to include literal values.
Data sent to our servers
We use Supabase for sign-in and for the database that records whether your access is active.
| Data | When | Why |
|---|---|---|
| Google account identifier, email address and display name | When you choose Continue with Google | Create your account and sign you in |
| Trial start and end times, lifetime-access flag, created and updated times | Stored in your profile | Decide whether generated code is unlocked |
| Authentication tokens | Kept in your browser and sent to Supabase with each verification request | Keep you signed in and verify access |
| Product settings such as trial length and price | Fetched when the extension opens | Show the right trial and price information |
We do not send inspected page content, selected elements, generated code, API requests, responses or timings, or captured credentials to Supabase.
Google runs the sign-in screen under its own privacy policy. Supabase processes data under its own terms as our infrastructure provider.
Data stored in your browser
| Item | Storage | Why |
|---|---|---|
| When your anonymous trial started | chrome.storage.local | Apply the anonymous trial window |
| Sign-in session (access and refresh tokens) | chrome.storage.local | Keep you signed in |
| Cached product settings | chrome.storage.local | Show trial and price information when offline |
| Cached access result (user id, access level, time verified) | chrome.storage.local | Keep a verified trial or lifetime user unlocked for up to 7 days if our server is briefly unreachable |
| The element selected on the current tab | chrome.storage.session | Keep your selection while the extension restarts in the background |
| The API call you select on the current tab | chrome.storage.session (temporary memory only) | Used by API Automation and API Performance while you work. Cleared when you refresh the page, close the tab or close the browser. Never written to local storage. |
Signing out removes your session and cached access result. Uninstalling the extension removes everything it stored.
Why the extension asks for each permission
| Permission | Why |
|---|---|
| Access to all websites | So you can inspect any site you test. The extension reads a page only to analyse it for you. |
activeTab, tabs, scripting | Attach the element picker to the page you are inspecting and notice when it navigates. |
sidePanel, contextMenus | Show the TestMaadu interface and the right-click Inspect entry. |
storage | The browser storage listed above. |
cookies | Only for the optional “replay captured authentication” feature, which reads the cookies of the inspected site so you can generate an authenticated test. Cookie values never leave your device. |
identity | Google sign-in. |
clipboardWrite | The Copy buttons. |
This website
This website is a set of static pages. It has no accounts, no forms and no comments. It does not use advertising trackers, analytics cookies or third-party scripts, and its fonts are served from the site itself.
Like any web host, our hosting provider may keep standard server logs (for example IP address, browser type and the pages requested) for security and reliability. If you email or call us, we use your details only to reply and to keep a record of the conversation.
If we add analytics or any other tracking to the website in future, we will describe it here first.
Why we process data, and where
We process your sign-in details and access status to provide the service you asked for (your account, your trial or lifetime access). We keep one hashed record after account deletion, described below, for our legitimate interest in preventing abuse of the free trial and in restoring a lifetime purchase you made.
Our service providers (Supabase and Google) may process data in countries other than your own. Where the law requires safeguards for such transfers, we rely on the safeguards those providers offer.
Retention and deletion
- Profile data is kept while your account exists.
- Delete your account: open the account menu in the extension and choose Delete account. This permanently removes your profile and sign-in record from our servers and signs you out on that device.
- Anti-abuse record: so that deleting and re-creating an account cannot be used to get a repeated free trial, and so that a purchased lifetime licence can be restored, we keep one irreversible hash of your email address (SHA-256 of the lower-cased address) with the trial end date and the lifetime flag. We do not keep the email address itself, and the hash cannot be turned back into it. To have this record removed too, contact kaushik.v2802@gmail.com.
- Data kept only in your browser is under your control: sign out, clear the extension’s data or uninstall it.
Sharing and payments
We do not sell your data and we do not share it with advertisers. It is processed by Supabase (hosting and sign-in) and Google (sign-in) as described above.
Lifetime access is paid for through a third-party payment provider. The provider collects and processes your payment details under its own terms. We never receive your full card or bank details. We receive only the confirmation we need to unlock your account, such as the purchase reference, the amount and the email address used. Before purchases open, this policy will be updated to name the provider.
Security
Connections to Supabase use HTTPS. Sign-in uses OAuth with PKCE. Database access is protected by row-level security, so a signed-in user can read only their own profile and cannot change their own access level. No service-role keys or payment secrets are included in the extension.
Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, the CCPA or India’s Digital Personal Data Protection Act), you may have the right to access, correct, delete or export your data, to withdraw consent and to complain to a regulator. Use Delete account in the extension, or contact kaushik.v2802@gmail.com. We aim to reply within 30 days.
Children
TestMaadu is a professional developer tool. It is not directed at children under 13, or under the minimum age in your country.
Changes to this policy
We will update this policy when how the extension or the website handles data changes, for example when payments open. We will change the “Last updated” date at the top of the page and, for material changes, tell you in the extension.
Chrome Web Store limited-use statement
TestMaadu’s use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Page and network data accessed by the extension is used only to provide the inspection and code-generation features described above.
Contact and grievances
Kaushik VM, trading as TestMaadu
Email: kaushik.v2802@gmail.com
Phone: +91 73492 62012
LinkedIn: linkedin.com/in/kaushik-vm
Address: Door 595, 68th Cross, Kumaraswamy Layout, Bengaluru 560078, Karnataka, India
Privacy questions and complaints can also go to our grievance contact on the Contact page.