Code-Navigator

Privacy Policy — Code Navigator

Code Navigator is a fully client-side Chrome extension. There is no Code Navigator server, no telemetry, and no analytics of any kind.

GitHub Personal Access Token (optional) — if you add one in Settings, it is stored only in chrome.storage.local on your device and sent only as an Authorization header on requests to api.github.com, to raise your GitHub API rate limit from 60 to 5,000 requests/hour. It is never sent anywhere else.
LLM API key (optional) — stored only in chrome.storage.local. The provider is detected from the key itself (Anthropic, OpenAI, Groq, and Gemini are recognized automatically; any other OpenAI-compatible endpoint can be configured manually). The key is sent only to that one provider’s API, directly from your browser, only when you trigger an LLM-powered explanation. If no key is configured, no LLM requests are ever made. A manually-configured custom endpoint requires a one-time permission grant (Chrome’s own permission prompt) scoped to just that endpoint’s domain.
Repository data — file trees, file contents, and commit metadata are fetched directly from api.github.com for repositories you visit, cached locally (IndexedDB) by commit SHA to avoid refetching, and never sent anywhere except back to your browser’s own memory/cache.
Bookmarks and recent activity — the URLs and titles of pages you bookmark or recently visited on github.com are stored only in chrome.storage.local, to power the Bookmarks and Recent tabs. This never leaves your device.

No Code Navigator servers exist — there is nothing to send data to even if we wanted to.
No tracking, analytics, or telemetry of any kind.
No data is sold, shared, or transmitted to any third party other than the GitHub and LLM API endpoints described above, which you explicitly configure.

storage / unlimitedStorage — for the local caching and settings described above.
Host access to github.com — to inject the sidebar UI.
Host access to api.github.com and raw.githubusercontent.com — fetching repository data, including the keyless path used when no GitHub token is configured.
Host access to api.anthropic.com, api.openai.com, api.groq.com, and generativelanguage.googleapis.com — the recognized LLM providers. A manually-configured custom/OpenAI-compatible endpoint requests its own permission at runtime instead, scoped to just that one domain, only when you save one.
These are the only network destinations the extension ever talks to.