Privacy Policy

Extension: Exploratory Testing Agent
Last updated: November 3, 2026

1. Overview

Exploratory Testing Agent ("the extension", "we") is a browser extension that helps you test web pages: it scans page elements, asserts their state, crawls links, and records the actions it performs as Playwright test scripts. Its optional AI Mode generates test cases for you. This policy explains what data the extension accesses, what leaves your device, who receives it, and how long it is kept.

The extension does not sell data, does not show ads, and does not use analytics, telemetry or tracking of any kind.

2. Data the Extension Handles

Data	When	Where it goes
Page structure — element types and visible labels (e.g. "button: Login", "input: Email"), the page title and URL path	Only when you use AI Mode ("Let Agent Decide" or "I'll Write My Cases")	Our backend, then our AI inference provider (Section 4). Not stored by us beyond the cache described in Section 5.
Page screenshot	Only in AI Mode, and only when a page has almost no readable elements (for example a canvas-based app)	Our backend, then our AI inference provider. Never stored.
Test cases you type	When you use "I'll Write My Cases"	Our backend, then our AI inference provider.
Recorded test steps — actions, element locators and URLs of pages you chose to test	When a run finishes in Record or AI Mode, or when you run a saved script	Our backend, which generates and runs the Playwright script and returns results.
Page content during scanning (the full DOM)	Whenever the agent runs	Processed only inside your browser. The full page is never uploaded.
Settings — AI Mode on/off, model choice, theme, and an optional OpenAI API key you enter yourself	When you change settings	Stored only on your device (`chrome.storage.local`).

The extension only acts on a tab after you click its toolbar icon. It does not read your browsing history, cookies, or saved passwords, and it does not collect your name, email address or other personal identifiers.

Please do not use AI Mode on pages that display passwords, personal, financial, health or other confidential information, because element labels and page titles from such pages would be sent for processing.

3. How We Use Data

Data is used solely to provide the extension's single purpose — testing the web pages you choose:

Page structure, screenshots and your written test cases are used to generate test cases.
Recorded steps are used to generate, store and run your Playwright scripts.

We do not use this data for advertising, profiling, credit or lending decisions, or to train AI models, and we do not transfer it to third parties except the service providers listed in Section 4 that process it on our behalf.

4. Service Providers

Our backend (exploratory-agent-backend.onrender.com), hosted on Render — receives AI requests and recorded test steps, generates and runs Playwright scripts, and returns results.
NVIDIA (integrate.api.nvidia.com, NVIDIA Privacy Policy) — the AI inference provider behind the extension's default "In-house model". Our backend forwards AI Mode requests to NVIDIA's hosted model API and returns the generated test cases.
OpenAI (api.openai.com, OpenAI Privacy Policy) — only if you choose OpenAI in Settings and enter your own API key. Requests then go directly from the extension to OpenAI under your own OpenAI account.

All transfers use encrypted HTTPS connections.

5. Storage and Retention

On your device (chrome.storage.local): settings, saved test scripts and run logs, and a cache of up to 40 recent AI responses (the generated test cases, kept up to 7 days) so repeated requests are instant. Remove all of it at any time by uninstalling the extension.
Session state (sessionStorage): temporary crawl progress, cleared when the tab closes or you click Clear.
On our backend: AI responses are cached in memory for up to 24 hours, keyed by a one-way hash of the request, so identical requests are not re-sent to the AI provider. AI request contents are not written to disk or logs. Generated Playwright scripts are stored until you delete them in the Scripts tab.
Screenshots are never stored by the extension or by our backend.

6. Permissions Explained

activeTab and scripting — inject the testing panel into the tab you are on after you click the extension icon, so it can scan and interact with that page.
Host access (<all_urls>) — keeps the panel working when the agent follows links to other pages of the site you are testing, captures a screenshot for AI Mode when needed, and lets the background service worker reach our backend and the OpenAI API.
storage — saves your settings, scripts and the AI response cache on your device.
alarms — a periodic keep-alive ping so the backend does not go to sleep between sessions. The ping carries no user data.

7. Chrome Web Store User Data Policy

The use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension's single, user-facing purpose; it is not sold, not used for advertising or creditworthiness, and not read by humans except with your explicit consent, for security purposes, or to comply with applicable law.

8. Your Choices

AI Mode is off by default and runs only when you start it. Leave it off and no page data is sent to any AI service.
You can switch to your own OpenAI account in Settings, or write test cases yourself.
Delete saved scripts in the Scripts tab, or uninstall the extension to remove all locally stored data.

9. Children's Privacy

This extension is a developer tool and is not directed at children under the age of 13. It does not knowingly collect data from children.

10. Changes to This Policy

If this policy changes materially, the updated version will be published at this URL with a new "Last updated" date.

11. Contact

Questions or requests about this policy: use the support contact on the extension's Chrome Web Store listing.