Privacy Policy — Fetchwing
Last updated: 2026-10-29
Fetchwing is a browser extension that adds an API client and response mocking to Chrome DevTools. This policy explains what data the extension handles and where it goes.
Summary
- Your requests, collections, mocks and environments are stored in your browser. If you sign in, they are also stored in one file in your own Google Drive.
- The developer runs no servers and receives none of your data. There is no analytics, advertising or tracking, and no data is sold or shared.
- Variables you mark secret never leave your device.
Data the extension handles
| Data | Where it is stored | Why |
|---|---|---|
| Your collections, folders, requests (URLs, headers, cookies, bodies), mocks and environments | Your browser's extension storage (chrome.storage.local), plus your own Google Drive file Fetchwing data when signed in | To show, send, mock and sync them |
| Values of variables marked secret | Your browser's extension storage only; they are uploaded as empty values | To use them in your requests |
| Your Google account email address | Your browser's extension storage | To show which account is signed in, and to ask before syncing into a different account |
| A temporary Google access token (about 1 hour) | Your browser's session storage, cleared when the browser closes | To read and write your Drive file |
| Which sites mocks run on, which mocks are on, and your theme | Your browser only (not synced) | To run mocks and remember your settings |
Network requests
- Requests you send: they go only to the URLs you send them to, with the headers, cookies and body you set.
- Google: sign-in (
accounts.google.com), your email address (openidconnect.googleapis.com), and reading and writing your Drive file (www.googleapis.com). Scopes requested:openid,emailandhttps://www.googleapis.com/auth/drive.file. Withdrive.filethe extension can only see files it created itself, not the rest of your Drive.
Site access and mocks
Fetchwing asks for access to a site the first time you send a request to it or turn on a mock for it. It never asks for all sites at install. You can remove access in Fetchwing's Settings or in chrome://extensions.
On the sites where you run mocks, Fetchwing adds a small script to the page so that the page's own fetch and XMLHttpRequest calls receive your mock responses. Scripts on those pages can read the list of mocks that are on: method, URL, status, headers and body. Do not put real secrets in mock responses for sites you do not trust.
Google API Services User Data Policy
Fetchwing's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Fetchwing is not affiliated with Google. Google Drive is a trademark of Google LLC.
Deleting your data
- Sign out in Fetchwing (the cloud button) to stop syncing. Delete the
Fetchwing datafile in Google Drive to remove the synced copy. - Remove the extension to delete everything stored in your browser.
- Revoke Fetchwing's Google access at myaccount.google.com/permissions.
Changes and contact
Changes to this policy are published on this page with a new date. Questions: open an issue on GitHub.