Skip to content

Latest commit

 

History

History
158 lines (108 loc) · 5.35 KB

PRIVACY_POLICY.md

File metadata and controls

158 lines (108 loc) · 5.35 KB

Privacy Policy for E6 Grafana Debugger

Last Updated: December 10, 2024

Introduction

E6 Grafana Debugger ("the Extension") is committed to protecting your privacy. This privacy policy explains how we handle your data when you use our browser extension.

Data Collection

What We Collect

The Extension operates entirely locally in your browser and does NOT collect, transmit, or store any personal data on external servers. Specifically:

  • No personal information is collected
  • No browsing history is tracked or stored
  • No user analytics or telemetry is collected
  • No data is shared with third parties (except as noted below)

Local Storage Only

All data is stored locally in your browser using the browser's built-in storage API:

  • User Preferences: Settings, environment configurations
  • Saved Queries: Your custom LogQL queries and filters
  • API Key: Your Anthropic API key (if you choose to configure AI features)
  • Analysis Cache: Temporary cache of AI analysis results
  • API Call History: Captured trace IDs from network requests on supported domains

This data never leaves your device except when:

  1. Making authorized requests to Grafana Loki APIs (to fetch logs)
  2. Making authorized requests to Anthropic API (only if you configure AI analysis)

How We Use Your Data

Network Requests

The Extension makes network requests to:

  1. Grafana Loki APIs (on E6 domains):

    • Purpose: Fetch logs, labels, and metrics for debugging
    • Data sent: Your LogQL queries, time ranges, and selected filters
    • Authorization: Uses your existing session/credentials for the domain

  2. Anthropic API (api.anthropic.com):

    • Purpose: AI-powered log analysis (optional feature)
    • Data sent: Sampled log entries, your trace IDs, and analysis requests
    • Authorization: Your API key (stored locally)
    • Only occurs when: You explicitly click "AI Analyze Logs"

Monitored Domains

The Extension monitors network requests on the following E6 domains to capture trace IDs:

  • *.loki.icu
  • *.hokage.world
  • *.e6.run
  • *.e6data.cloud
  • *.e6data.app

Monitoring is limited to:

  • Extracting x-trace-id headers from API responses
  • Capturing request URL, method, and status code
  • No request/response body content is stored

Permissions

Required Permissions

  • storage: Save your preferences, queries, and cache locally in your browser
  • activeTab: Access the current tab to monitor network requests and capture trace IDs
  • tabs: Detect domain changes to show relevant environments and open Grafana links

Host Permissions

  • E6 Domains: To monitor API calls and capture trace IDs on your work domains
  • Grafana Domains: To fetch logs and labels from Loki APIs
  • Anthropic API: To perform AI-powered log analysis (optional)

Data Security

API Key Storage

If you configure AI analysis:

  • Your Anthropic API key is stored using the browser's encrypted storage mechanism
  • The key never leaves your device except in API requests to Anthropic
  • You can delete your API key at any time in the extension settings

HTTPS Only

All network requests made by the Extension use secure HTTPS connections.

No Remote Code Execution

All code runs locally in your browser. The Extension does not download or execute remote code.

Third-Party Services

Anthropic API (Optional)

If you enable AI-powered log analysis:

  • Log samples are sent to Anthropic's API for analysis
  • Anthropic's privacy policy applies to this data: https://www.anthropic.com/privacy
  • You can disable AI features at any time by removing your API key

Grafana Loki

When fetching logs:

  • Requests are made to your organization's Grafana instances
  • Your organization's data policies apply
  • The Extension does not store full log contents long-term

Data Retention

  • Local storage data: Retained until you clear extension data or uninstall
  • Analysis cache: Automatically cleared on browser restart
  • API call history: Limited to last 100 calls per tab
  • No server-side retention: We do not operate servers or databases

Your Rights

You can:

  • View stored data: Open extension settings
  • Delete all data: Clear extension storage in settings
  • Remove API keys: Delete your Anthropic API key in settings
  • Uninstall: Remove the extension completely to delete all local data

Children's Privacy

This Extension is designed for professional use by software developers and is not intended for children under 13.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the "Last Updated" date above.

Contact

For questions or concerns about privacy:

Compliance

This Extension complies with:

  • Chrome Web Store Developer Program Policies
  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA)

Summary

Your privacy matters. The E6 Grafana Debugger:

  • ✅ Stores data locally only
  • ✅ Makes no external tracking requests
  • ✅ Requires explicit consent for AI features
  • ✅ Uses HTTPS for all requests
  • ✅ Gives you full control over your data
  • ❌ Does not collect analytics
  • ❌ Does not share data with third parties (except when you use AI features)
  • ❌ Does not access data outside specified domains