Privacy Policy

Jira Analysis Tool Chrome Extension — Last updated: April 2026

Summary

Jira Analysis Tool does not collect, store, or transmit any personal data or Jira content to any external server. All data remains within your browser and your organization's Jira instance.

What data is accessed

The extension reads data from your Jira instance via the official Jira REST API (/rest/api/ and /rest/agile/ endpoints) using your existing browser session cookies. This includes:

• Issue metadata: key, summary, status, issue type, assignee, dates
• Issue changelog (status transition history) for time metric calculations
• Board and sprint configuration
• Epic hierarchy information

This data is used exclusively to compute and display flow metrics (Throughput, Cycle Time, Lead Time, CFD, etc.) within the extension's analytics page. It is never sent anywhere else.

What data is stored

The extension uses chrome.storage.local to persist only your display preferences:

• Custom "Done" and "In Progress" status names (text strings you enter)
• Working days toggle (boolean)
• Selected date range (number of days)

No Jira issue data, no issue keys, no user names, and no credentials are ever written to storage. This data is stored locally in your browser and is never transmitted to any server.

Data transmission

All network requests made by the extension go exclusively to:

• Your Jira instance (the same origin you are logged into)

The background service worker enforces this at the code level: every request is validated against the Jira origin and must begin with a known REST API path. Requests to any other origin are rejected.

The analytics page has a strict Content Security Policy (connect-src 'none'), which means it is technically incapable of making any external network requests.

Permissions used

• storage — to save display preferences (status names, date range) locally.
• host_permissions for Jira domains — to proxy authenticated API requests to your Jira instance using your existing browser session. The broad pattern (*://*/rest/api/*) is required because Jira Server / Data Center instances can be hosted on any corporate domain. The extension only ever contacts the specific Jira instance you are logged into.

Third-party services

The extension does not integrate with any third-party analytics, advertising, or tracking services. No SDKs from third parties are loaded at runtime. The only bundled third-party libraries are Chart.js and chartjs-plugin-annotation, which run entirely client-side and make no network requests.

Children's privacy

This extension is intended for professional use by software development teams. It does not knowingly collect any information from children under 13.

Changes to this policy

If this policy changes materially, the updated version will be published at this URL with a new "Last updated" date.

Contact

If you have questions about this privacy policy, please open an issue on the GitHub repository or contact: zakharovleonidwb@protonmail.com