Privacy Policy

Last updated: March 25, 2026

Extension: SFDC Police · Publisher: Taksh Patel

1. Overview

SFDC Police is a Chrome extension designed exclusively for Salesforce administrators and developers. It operates entirely within your browser and your Salesforce org. We do not operate any servers, collect telemetry, or transmit any data outside of your browser session.

2. Data We Access

2.1 Salesforce Session Cookies

To authenticate with your Salesforce org's REST APIs, the extension reads the following browser cookies from Salesforce domains:

sid — Salesforce session ID used to authenticate API requests
sid_Client — Supplementary session cookie for certain org configurations

These cookies are:

Read locally within your browser only
Never transmitted to any server outside of Salesforce's own REST APIs
Never stored beyond your active browser session
Only accessed on official Salesforce domains (*.salesforce.com, *.lightning.force.com, *.force.com, etc.)

2.2 Tab and URL Information

The extension reads the URL of your active Salesforce tab to detect your org's domain and Instance URL. This is used solely to identify which Salesforce org you are working in and to support multi-org switching. Tab URLs are never stored, logged, or transmitted externally.

2.3 Local Extension Storage

The extension uses Chrome's storage API to persist:

Org connection settings (domain, API version, user info) across browser sessions
Cached metadata (object descriptions, field lists) to reduce repeat API calls
Query history and workspaces within the SOQL Builder module
Transaction logs for the Access Editor's rollback capability
Your subscription/license status if you have an active subscription

All data stored is kept entirely within your browser's local extension storage, never synced to external servers, and clearable at any time by removing the extension.

2.4 Subscription Verification

If you have an active subscription, the extension communicates with our payment provider (ExtensionPay / Stripe) to verify your subscription status. This transmits only your email address and license key — no Salesforce data is sent.

3. Data We Do NOT Collect

We do not collect analytics, crash reports, or usage telemetry
We do not transmit Salesforce data to any third-party service
We do not store your Salesforce credentials, passwords, or session tokens on any external server
We do not use advertising networks or tracking pixels

4. Data Flow

No data ever leaves your browser except for calls made directly to your own Salesforce org:

Your Browser
  ├── Reads Salesforce session cookies (sid, sid_Client)
  │     └── Used only to authenticate REST API calls
  ├── Calls Salesforce REST APIs directly
  │     └── Responses displayed in extension UI only
  └── Stores settings/cache in chrome.storage.local
        └── Stays on your device only

5. Permissions Explained

Permission	Why It's Required
`cookies`	Read Salesforce session cookies (`sid`, `sid_Client`) for API authentication
`tabs`	Detect which Salesforce org tab is active; support multi-org switching
`storage`	Persist org settings, cached metadata, and query history across sessions
`activeTab`	Read the current tab's URL to identify the active Salesforce org
`alarms`	Scheduled cache refresh and service worker keepalive during long operations
`windows`	Manage extension windows for the full-page admin console
Host permissions	Inject floating panel into Salesforce pages and make authenticated REST API calls to your org

6. Third-Party Services

SFDC Police does not transmit your Salesforce data to any third-party service. Network requests go to:

Salesforce domains — *.salesforce.com, *.lightning.force.com, *.my.salesforce.com, *.force.com
ExtensionPay / Stripe — subscription verification only (email + license key, no Salesforce data)

7. Website Analytics

This website (sfdcpolice.com) uses privacy-respecting analytics that do not use cookies and do not collect personal information. The extension itself collects zero analytics.

8. Children's Privacy

This extension is intended for professional Salesforce administrators and developers. It is not directed at children under 13 and does not knowingly collect information from minors.

9. Your Rights

You have the right to:

Remove the extension at any time, which deletes all locally stored data
Request deletion of your payment/subscription data by contacting privacy@sfdcpolice.com
Unsubscribe from any marketing emails at any time

10. Changes to This Policy

If this privacy policy is updated, the Last Updated date at the top will be revised. Significant changes will be noted in the Chrome Web Store changelog.

11. Contact

For privacy questions, contact us at privacy@sfdcpolice.com.

SFDC Police is not affiliated with, endorsed by, or sponsored by Salesforce, Inc. Salesforce is a registered trademark of Salesforce, Inc.