Open Graph Tester
Privacy Policy
Effective date: 16 September 2026
This Privacy Policy (“Policy”) explains the information collection, use, and sharing practices of Open Graph Tester (“we,” “us,” and “our”). Open Graph Tester is a Chrome browser extension, published by Owlary, that shows how the page you are viewing will look when shared and validates its Open Graph and Twitter Card tags. The Policy covers the extension and the pages we host for it on owlary.com (together, the “Services”).
Before you use the Services, please review this Policy. By using any part of the Services, you understand that information will be handled as outlined here. If you do not agree with this Policy, please do not use the Services.
The short version: the extension reads the page in front of you, on your machine, and sends nothing to us. The only thing we ever see is anonymous, cookieless visit statistics for the welcome page that opens once after installation.
Our Principles
Open Graph Tester has been designed to be consistent with the following principles:
- Privacy policies should be human readable and easy to find.
- Data collection, storage, and processing should be simplified as much as possible to enhance security, ensure consistency, and make the practices easy for users to understand.
- Data practices should meet the reasonable expectations of users.
What the Extension Reads, and Where It Goes
When the side panel is open, the extension reads, inside your browser:
- the
<meta>,<title>and<link rel="canonical">tags of the active tab, to build the preview and run the checks; - the preview image named in
og:image, loaded by the same page that declared it, so the request looks exactly like the page loading its own picture; - a fresh copy of the page’s HTML, requested from that page’s own server, to tell tags rendered on the server apart from tags added by JavaScript;
- changes to the page’s tags after load, so the panel can update itself.
All of this happens on your computer. The extension makes no requests to any server of ours; the only network requests are the ones listed above, to the site you are inspecting. Page content, tags, addresses and images are never transmitted to us, stored by us, or seen by us. You can verify this yourself: open DevTools → Network while the panel is open, or search the extension’s source for a request to any host other than the page you are on.
Information We Collect
Information you provide directly to us. The extension has no accounts, sign-up, forms or purchases. The only information you can give us is what you choose to include when you contact us by email, such as your email address and the content of your message.
Information that is automatically collected. The extension collects none: it contains no analytics, telemetry, tracking, advertising identifiers or crash reporting.
Our website pages for the extension (for example the welcome page that opens once after installation) use Umami, a cookieless analytics tool that runs on our own server. It records aggregate page views together with the visitor’s country, browser, operating system, device type, screen size and browser language. It sets no cookies, does not store IP addresses (it derives a rotating, non-reversible visitor hash instead) and cannot track you across other sites. Our web server keeps no request logs of visitor IP addresses.
Cookies and other tracking technologies. We do not use cookies, tracking pixels or similar technologies, on the website or in the extension.
Information from third parties. We do not obtain information about you from third parties.
What the Extension Stores
- Your last chosen preview platform and device toggle, kept in the extension’s local storage so the panel opens where you left it. It never leaves your browser and is removed when you uninstall the extension.
- The list of sites you have allowed with “Allow this domain”, kept by Chrome as extension permissions and manageable at
chrome://extensions.
Permissions
- activeTab, scripting — to read the tags of the page you are viewing when you open the panel, load its preview image from inside the page and notice tag changes.
- tabs — to know which tab is active and its address, so the panel follows the tab you work on and refreshes after a reload or tab switch. The address is not stored or transmitted.
- sidePanel — to show the panel.
- Host access to localhost and 127.0.0.1 — so the panel keeps updating after a page reload on your local development server.
- Optional host access — granted by you, per site, only when you click “Allow this domain”; needed for the same auto-refresh on your staging or production site. No broad access to all websites is requested.
Exports
“Copy JSON”, “Copy URL” and “Download report” put data on your clipboard or into a file you choose. They do not upload anything.
How We Use Your Information
We use the little information we have to:
- respond to your questions, feedback and support requests;
- understand, in aggregate, how many people install the extension and from which countries and languages, so we can improve it and decide which languages to support;
- comply with the law and protect the safety, rights, property, or security of Open Graph Tester, the Services, our users, and the general public.
Aggregate statistics contain no personal data and may be used for any purpose, including research and deciding what to build next.
When We Disclose Your Information
We do not sell, rent or share personal information. We may disclose information only in the following circumstances:
- Service providers. Our website and analytics run on a virtual server rented from Hetzner Online GmbH (EU). The provider hosts the data on our behalf and has no other use for it.
- Legal compliance and protection. If required to do so by law, or on a good-faith belief that disclosure is reasonably necessary to comply with legal process, to enforce this Policy, or to protect the rights, property, or personal safety of Open Graph Tester, our users, and the public.
- Business transfers. If the extension or Owlary is transferred or sold, the information described in this Policy may be part of the transferred assets, subject to the same protections.
- Consent. To any third party you ask us to share information with.
Legal Basis for Processing Personal Data
Where the laws of your jurisdiction require it, our legal grounds for handling information are: our legitimate interests in operating, securing and improving the Services and in answering your requests; legal compliance where we must use or disclose information to meet a legal obligation; and consent, where required by law, which you may withdraw at any time in accordance with applicable law.
Online Analytics
We use no third-party analytics services such as Google Analytics on our Services. The Umami instance described above is self-hosted; the numbers go to no third party. The extension itself contains no analytics of any kind.
The Chrome Web Store listing of the extension is operated by Google and is governed by Google’s privacy policy, not this one.
Your Choices and Data Subject Rights
Individuals in the European Economic Area (“EEA”), the United Kingdom and other jurisdictions have rights (subject to applicable exceptions and limitations) to obtain confirmation of whether we hold information about them, to access it, and to obtain its correction or deletion. You may also object to or restrict our processing and withdraw any consent you have provided. Because the extension sends us nothing and our analytics are anonymous, the only personal data we can hold about you is the email you send us; to exercise these rights, email us at support@owlary.com with the nature of your request. You also have the right to contact your supervisory authority, but we encourage you to contact us first so we can resolve your concern directly.
International Transfers
Our server is located in the European Union. If you contact us from another country, your message is processed there. We do not transfer personal information to other third parties.
Security Measures
We have implemented technical and organizational measures to protect the information we handle: the extension keeps everything on your device, the website serves everything over HTTPS, and the analytics tool is designed not to retain identifying data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The Services are a general-purpose developer tool and are not directed at children under the age of 13. We do not knowingly collect personal information from children; if we become aware that we have, we will delete it as soon as practicable.
Data Retention
Support emails are kept for as long as needed to resolve your request and then deleted. Aggregate analytics contain no personal data and may be retained indefinitely.
Third-Party Links and Services
The extension previews how a page would look on third-party platforms such as Facebook, X, LinkedIn, Telegram, Slack, Discord, WhatsApp, Pinterest and Reddit. It does not contact those platforms. If you follow links to third-party websites from our Services, their privacy policies apply, not this one.
Changes to this Privacy Policy
We will continue to evaluate this Policy as we update the Services and may make changes accordingly. We will post any changes here and revise the date above. If we make material changes, we will provide notice as required by law.
Questions About this Privacy Policy
If you have any questions about this Policy or our privacy practices, contact us at support@owlary.com.