Privacy Policy — Ditto
Last updated: 17 October 2026
Ditto ("the extension") is a Chrome extension for previewing the page you are viewing at several device sizes at once. This policy explains what the extension does with data. In short: it collects nothing, sends nothing, and has no server.
What the extension does not do
- It does not collect, transmit, sell or share any personal or browsing data.
- It has no account, no server, no analytics, no advertising and no third-party SDKs.
- It makes no network requests of its own. The only pages it loads are the ones you are already viewing, which the device previews load from that site exactly as your browser would.
- It does not run on any page until you click the toolbar icon.
Data stored on your device
These are kept only in your browser and never leave it:
| What | Where | Why |
|---|---|---|
| Preferences (theme, language, background, chosen devices, zoom, custom sizes) | chrome.storage.local | So the workspace opens the way you left it |
The devices you used on each site, keyed by the site's address (for example https://example.com) — up to the last 50 sites | chrome.storage.local | So each site reopens with its own devices. More → Forget this site's devices clears one site |
| Recently used and favourite devices, saved board presets | Browser local storage of the page where you used the workspace | Quick access in the device list |
| Which tabs currently have the workspace open | chrome.storage.session (cleared when the browser closes) | To restore the workspace after the page navigates |
You can remove all of it at any time with More → Reset preferences, by removing the extension, or by clearing site data in Chrome.
Screenshots and recordings
Screenshots and screen recordings are created only when you press the Screenshot or Record button. They are processed entirely on your device and are saved only when you choose to download or copy them. The extension never uploads them anywhere.
How the device previews work
To show a site inside device frames, the extension uses Chrome's declarativeNetRequest API only for the tab where you opened the workspace and only for frames inside that workspace. It:
- removes the
X-Frame-OptionsandContent-Security-Policyresponse headers for those frames, so the site is allowed to appear inside the preview, and - sets a mobile
User-Agentrequest header for those frames, so the site serves its mobile layout.
These rules are removed as soon as you close the workspace, navigate away or close the tab. They never apply to other tabs, and no request contents are read or stored.
Permissions
| Permission | Why it is needed |
|---|---|
| Host access (requested when you first click the icon) | To open the workspace on the page you choose |
activeTab, scripting | To add the workspace to the current tab when you click the icon |
declarativeNetRequest | Per-tab header rules described above, so sites render inside device frames |
storage | To remember your preferences locally |
tabCapture, offscreen | To record a video of the tab when you press Record |
notifications | To tell you when a page cannot be previewed (for example Chrome's own pages) |
This website
The website ditto.niranjand.in counts page views with Vercel Web Analytics, which uses no cookies and stores no personal data. The extension itself collects nothing.
Children
The extension is a developer and design tool and is not directed at children. It collects no data from anyone.
Changes
If this policy changes, the updated version will be published at this address with a new date above.
Contact
Questions or concerns: email hello@niranjand.in.