Privacy Policy
Last updated: February 2026
Overview
SigInspector is a Chrome DevTools extension for developers. It intercepts and displays Statsig SDK network traffic (feature gate evaluations, experiment exposures, and custom events) directly inside the Chrome DevTools panel of the tab being inspected.
This policy describes how SigInspector handles data encountered during its operation.
What SigInspector Does
SigInspector injects a content script into web pages to intercept outbound network calls made by the Statsig JavaScript SDK — specifically requests to known Statsig API endpoints (e.g. statsigapi.net, featuregates.org). The request and response payloads are decoded and displayed in the SigInspector DevTools panel.
This interception is intentional and controlled by the developer: the extension only activates when the SigInspector panel is open in Chrome DevTools for that specific tab.
Data Accessed
SigInspector reads the content of Statsig SDK API requests and responses. These payloads may include:
- Feature gate names and evaluation results
- Experiment names and assigned groups
- Custom event names and values
- Statsig user context fields set by the developer's application (e.g.
userID,email,customIDs)
This data is accessed solely to display it to the developer who is actively using the DevTools panel.
Data Handling
| Practice | SigInspector |
|---|---|
| Data stored on device | No |
| Data transmitted to any server | No |
| Data shared with third parties | No |
| Data used for analytics or profiling | No |
| Data retained after panel is closed | No |
All data accessed by SigInspector exists exclusively in the browser's memory for the duration of the active DevTools session. It is never written to disk, never sent to any external server (including any server operated by the extension author), and is discarded when the DevTools panel is closed or the tab is navigated.
Permissions
SigInspector requests the <all_urls> host permission. This is required because Statsig-instrumented pages can be on any domain, and the content script must be injected before the page loads (document_start) to intercept SDK calls reliably. The extension does not use this permission to access, read, or monitor any content outside of Statsig SDK API traffic.
No Remote Code
SigInspector does not load or execute any remote code. All extension logic is bundled within the extension package.
Children's Privacy
SigInspector is a developer tool intended for use by software developers. It is not directed at children and does not knowingly interact with data from users under the age of 13.
Changes to This Policy
If this policy changes, the updated version will be committed to this repository with a revised "Last updated" date above.
Contact
Questions about this privacy policy can be directed to: hello@applied.llc