CSRF PoC Generator does not collect, store, or transmit any user data.

• All processing happens locally in your browser.
• The extension reads form fields only from the tab you are actively viewing, and only when you click "Scan Page for Forms."
• No network requests are made by the extension itself. The generated PoC file never leaves your device unless you choose to save or share it.
• No analytics, tracking, or third-party services are used.

Permissions used

• activeTab — lets the extension act on the tab you're currently viewing, only after you click the extension icon.
• scripting — lets the extension read form data from that tab to build the PoC.

Contact

Questions about this policy can be raised via GitHub Issues or the author's GitHub profile.