PermLens

Privacy Policy

PermLens is a browser extension that runs 100% in your browser. It does not collect, store, or transmit any of your data to us or to any third party. There are no servers, no accounts, and no tracking.

Last updated: July 8, 2026.

What PermLens does

PermLens helps Salesforce administrators and consultants understand and compare user access (object CRUD, field-level security, permission sets, and record access). All processing happens locally, inside your browser.

Data we collect

None. PermLens does not collect, transmit, or sell personal data. There is no analytics, no backend, and none of your information leaves your browser to reach us.

How PermLens accesses Salesforce

The extension uses your own already-authenticated session in the active Salesforce tab to call only the REST/Tooling APIs of your own Salesforce org. The responses are shown in the panel and processed locally. None of this information is sent anywhere other than your own Salesforce.

Permission justification

• cookies: read the session cookie (sid) of the active Salesforce tab, only to authenticate API calls to your own org.
• storage: save your extension preferences and a daily usage counter locally, on your own device. This data never leaves your browser.
• activeTab / tabs / sidePanel: identify the Salesforce org in the active tab and open the extension's side panel.
• host permissions (Salesforce domains): restricted to Salesforce domains (*.salesforce.com, *.force.com, etc.) so the extension can call your org's APIs.

Local storage

Preferences and a usage counter are stored via chrome.storage.local, only on your device. You can clear this data at any time by removing the extension or clearing your browser data.

Third-party sharing

There is none. Since we do not collect any data, we do not share, sell, or transfer anything to third parties.

Changes to this policy

If PermLens introduces paid features in the future, this policy will be updated to describe any additional processing (for example, from a payment provider). The current version describes the extension as it is today: with no data collection.

Contact

Questions about privacy or about the extension: sousawitor@gmail.com.