Privacy policy
Your tracking data stays on your device.
Updated 22 October 2026. This policy covers the Provetag Chrome extension and this website.
Data collected by the extension
Provetag observes GA4 network payloads and window.dataLayer pushes only after you start a capture on the current browser tab. These records can include page URLs, event names, GA4 client or user identifiers, transaction identifiers, purchase values and currencies, and other parameters configured by the inspected website.
Provetag does not transmit this captured data to us or to any third party.
How captured data is used
Captured data is used only to validate the tracking plan selected by the user, display the corresponding evidence in the extension, and create a report when the user requests an export.
Provetag's use of captured user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Captured data is not sold, transferred for advertising, used for purposes unrelated to tracking QA, used to determine creditworthiness, or made available for human review by us.
Storage
Captured events are stored in Chrome session storage and are limited to 500 records per tab. They are cleared when you clear the session, close the tab, or end the browser session. Imported tracking plans are stored in Chrome local storage on your device so they can be reused. The trial start timestamp may also be stored through Chrome Sync, according to your Chrome account sync settings, so reinstalling the extension does not normally restart the trial. Reports and JSON files are created locally only when you export them.
Permissions
- activeTab: temporary access to the tab where you deliberately start capture.
- scripting: observes GA4 and dataLayer activity on that tab.
- storage: keeps the current capture and imported plan locally.
- sidePanel: displays the audit beside the page being tested.
Provetag does not request permanent access to all websites or your browsing history.
Optional website measurement
With your permission, this website sends four limited events to the dedicated Provetag project in PostHog EU Cloud: a site view, a click toward the Chrome Web Store, a click toward checkout, and a checkout-success page return. A Store click does not confirm an installation, and a checkout return does not confirm payment. The measurement does not include captured tracking data, tracking plans, reports, form data, email addresses, license keys, checkout identifiers, query parameters, or full page URLs.
Events use a random identifier kept only for the current browser tab session. No person profile, autocapture, heatmap or session replay is created. The project is configured not to retain client IP addresses with events. You can decline or withdraw this optional measurement at any time below. Standard infrastructure logs may still temporarily contain technical request information such as an IP address and browser type for security and reliability.
Current preference: disabled.
License and third-party checkout
Provetag uses Polar as merchant of record for the optional Pro license. Polar processes checkout, payment details, tax, receipts, and delivery of the license key under its privacy policy; Provetag never receives card details.
When you deliberately activate Pro, the extension sends the license key, the public Provetag organization identifier, and a generic browser activation label to Polar. No captured analytics payload, tracking plan, report, page content, or browsing history is sent for license validation.
Support and changes
Support is provided through the support channel on the Chrome Web Store listing once the extension is published. Material changes to this policy will be dated on this page.