Privacy Policy

Last Updated: February 19, 2025

Overview

SFCC Log Guard ("the Extension") is committed to protecting your privacy. This privacy policy explains how we handle your data - which is simple: we don't handle it at all because we don't collect it.

Data Collection

We do NOT collect any data.

The Extension operates entirely locally on your device and does not transmit any information to external servers. There are no exceptions to this rule.

What Information Does the Extension Access?

1. SFCC Credentials (Stored Locally Only)

• What: Your Salesforce Commerce Cloud username and password
• Why: To authenticate with your SFCC instance and fetch error logs via WebDAV
• Where Stored: Locally in Chrome's encrypted storage API on your device
• Retention: 30 days, then automatically deleted
• Transmission: ONLY sent to your specified SFCC instances via HTTPS. Never sent anywhere else.

2. SFCC Error Logs (Temporary Only)

• What: Error log files from your SFCC instances
• Why: To display and help you debug errors
• Where Stored: Temporarily in browser memory while viewing. Never persisted to disk.
• Transmission: Never transmitted outside your local machine

3. Environment Configuration (Local Only)

• What: Environment names and SFCC hostnames you configure
• Where Stored: Locally in Chrome's storage on your device
• Transmission: Never transmitted anywhere

What We Do NOT Collect

• ❌ Personal information (name, email, address, phone)
• ❌ Browsing history
• ❌ Usage analytics or statistics
• ❌ Crash reports
• ❌ Device information
• ❌ Location data
• ❌ Cookies or tracking pixels
• ❌ Any data from websites you visit
• ❌ Literally anything else

Third-Party Services

The Extension does NOT use any third-party services.

• ❌ No analytics (no Google Analytics, no Mixpanel, nothing)
• ❌ No crash reporting (no Sentry, no Bugsnag, nothing)
• ❌ No external APIs (except your own SFCC instances)
• ❌ No tracking pixels or cookies
• ❌ No advertising networks
• ❌ No data sharing with anyone

Data Transmission

The Extension ONLY communicates with:

1. Your SFCC Instances - To fetch error logs via WebDAV
   • Uses HTTPS for all connections
   • Uses your provided credentials
   • Only accesses *.demandware.net domains

That's it. No other connections are made. No data goes to our servers because we don't have any servers.

Data Storage

All data is stored locally using Chrome's storage API:

• Credentials: Encrypted automatically by Chrome's storage system
• Environments: Stored in plain text locally (just hostnames and names)
• No cloud storage: Nothing is synced or uploaded to any cloud service

Data Security

We implement security best practices:

• ✅ HTTPS-only communication with SFCC instances
• ✅ Chrome's encrypted storage API for credentials
• ✅ 30-day automatic credential expiration
• ✅ No plaintext password storage in logs or console
• ✅ No external API calls that could leak data
• ✅ Minimal permissions (only what's necessary)

Your Data Rights

You have complete control over your data:

• View: All data is stored locally. Open Chrome DevTools → Application → Storage to see everything.
• Delete: Click "Logout" in the extension to clear credentials, or uninstall the extension to remove all data.
• Export: Data is stored locally; no export needed. It never leaves your device.
• Port: You can manually copy environment configurations from Chrome storage if needed.

Children's Privacy

This Extension is intended for professional developers working with Salesforce Commerce Cloud. It does not knowingly collect data from anyone, including children under 13. Since we don't collect any data at all, COPPA compliance is inherent.

Open Source

This Extension is open source. You can review all code in the repository.

Full transparency means you can verify that we do exactly what we say: nothing with your data.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected in:

• The "Last Updated" date at the top of this page
• The Chrome Web Store listing

If we ever start collecting any data (which we have no plans to do), we will update this policy prominently and require user consent.

Contact

Questions about privacy or this policy? Please contact us through the Chrome Web Store.

Compliance

This Extension complies with:

• ✅ Chrome Web Store Developer Program Policies
• ✅ Chrome Extension Manifest V3 requirements
• ✅ GDPR principles (no data collection = minimal privacy risk)
• ✅ CCPA (California Consumer Privacy Act)
• ✅ COPPA (Children's Online Privacy Protection Act)