Privacy Policy

Last updated: March 23, 2026

SF Org Manager – Chrome Extension

Overview

SF Org Manager is a browser extension that discovers and displays Salesforce orgs associated with active browser sessions. This policy explains what data the extension accesses, how it is used, and what is stored. We do not collect, sell, or share your data with any third parties.

Data We Access

The extension accesses the following data solely to provide its core functionality:

• Salesforce session cookies (sid): Scanned on Salesforce instance hosts (*.my.salesforce.com, *.force.com) to discover active org sessions. The org ID is parsed from the cookie value for deduplication purposes.
• Salesforce REST API responses: Each session is validated via GET /services/data/v60.0/ using the sid as a Bearer token. Active sessions are enriched with org metadata (Organization SOQL), user metadata (Chatter users/me and User SOQL for profile name). This data is used only for display in the extension popup.
• Alias and nickname hints: Cookie name heuristics (e.g. alias or nickname in cookie names) and user-saved aliases from extension storage are used to label org cards.

Local Storage and Caching

The extension persists display metadata locally using chrome.storage.local (or browser.storage.local on Firefox). This cache includes:

• Org and user metadata retrieved from the Salesforce REST API (e.g. org name, org type, username, profile name)
• Aliases you have manually saved within the extension

This data is stored entirely on your device. It is never transmitted to any server operated by the extension developer and is used exclusively to render org cards in the popup UI.

How Data Is Used

All data accessed by the extension is used solely to:

• Discover and identify Salesforce orgs tied to active browser sessions
• Display org type, session status, and user metadata in the popup
• Enable the Open Org and CLI Copy (sf org open) features

Data is never used for analytics, advertising, profiling, or any purpose beyond the above.

Third-Party Sharing

No data accessed or stored by this extension is shared with, sold to, or transmitted to any third party. The only external network requests made are directly to your own Salesforce instance hosts for session validation and metadata enrichment.

Permissions

The extension requests the following permissions, each strictly necessary for its functionality:

• cookies – to read sid session cookies on Salesforce hosts
• storage – to persist the display cache and user-saved aliases locally on your device
• Host permissions for https://*.salesforce.com/* and https://*.force.com/* – to make authenticated REST API calls to your Salesforce instances

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last updated" date at the top of this page.

Contact

If you have any questions about this Privacy Policy, please contact us via the Chrome Web Store listing page.