EasyQA — Privacy Policy

📅 Effective date: April 27, 2026 🔄 Last updated: April 27, 2026 📦 Extension version: 1.0.0

🔒

No data collected

EasyQA does not collect, transmit, or store any data on external servers.

🚫

Never sold or shared

Your data is never sold, rented, or shared with third parties — ever.

💻

Stays on your device

Everything is stored locally in your browser. You are always in control.

🎯

Single purpose

EasyQA only does one thing: compare Figma designs against live web pages.

1. Overview

EasyQA ("the extension", "we", "our") is a Chrome browser extension that lets you compare a Figma design frame against a live webpage for visual quality assurance. It is built and maintained by helloshams.

This Privacy Policy explains what information EasyQA handles, where that information is stored, and what it is never used for. By installing or using EasyQA, you agree to this policy.

Short version: EasyQA stores a small amount of data exclusively inside your own browser. Nothing is sent to any server other than Figma's own API (to fetch your design image), and nothing is collected by us.

2. Data EasyQA Handles

The table below covers every piece of data the extension touches.

Data	Where stored	Sent externally?	When cleared
Figma personal access token	chrome.storage.local (if you choose "Save") chrome.storage.session (if you choose "Session only")	Sent only to api.figma.com over HTTPS to fetch your design image. Never sent anywhere else.	Session storage: cleared when browser closes. Local storage: cleared when you remove the extension or manually clear it.
Figma file key & node ID (parsed from the URL you paste)	chrome.storage.local	Sent to api.figma.com as part of the image fetch URL. Never sent elsewhere.	Cleared when you load a new design or remove the extension.
Figma URL (the link you paste)	chrome.storage.local	Not transmitted. Used only to display an "Open in Figma" link locally.	Cleared when you load a new design or remove the extension.
Tab screenshot (captured when you click Compare or Start QA)	JavaScript memory only	Never transmitted. Stays in memory for the duration of the QA session only.	Cleared immediately when you close the toolbar or navigate away.
Comments & annotations (pins you drop on the page)	JavaScript memory only	Never transmitted. Export creates a local file download — nothing is sent to a server.	Cleared when you close the toolbar.
Theme preference (dark / light / auto)	chrome.storage.local	Never transmitted.	Cleared when you remove the extension.

3. Figma Token Security

Your Figma personal access token is the most sensitive piece of data EasyQA handles. We take several steps to protect it:

✓ Encrypted at rest. The token is encrypted using AES-GCM 256-bit encryption (via the browser's built-in Web Crypto API) before being written to storage. Anyone inspecting Chrome's storage directly will see an encrypted value, not your raw token.
✓ Never logged. The token is never written to the browser console, error logs, or any analytics system.
✓ Transmitted only to Figma. The token is sent exclusively to api.figma.com via HTTPS in the X-Figma-Token request header. It is not included in any URL or query parameter.
✓ Sanitised before use. Control characters and hidden Unicode are stripped from the token before it is stored or used, preventing injection-style attacks.
✓ Session-only option. You can choose to store the token for the current browser session only. It is automatically deleted when you close the browser.
✓ You can delete it anytime. Go to Chrome's extension storage or simply remove and reinstall the extension to wipe all stored data.

4. What EasyQA Never Does

✗Collects analytics, telemetry, or usage data of any kind.
✗Transmits screenshots, page content, or URLs of the websites you visit to any server.
✗Sells, rents, or shares any data with third parties.
✗Displays ads or tracks you for advertising purposes.
✗Loads any remote scripts, fonts, or resources from external CDNs.
✗Uses cookies of any kind.
✗Accesses your browsing history.
✗Reads or modifies web page content except on tabs where you explicitly activate the extension.

5. Third-Party Services

EasyQA communicates with exactly one external service: Figma's API (api.figma.com). This communication happens only when you paste a Figma URL and click to load the design.

The data sent to Figma's API is limited to:

→Your Figma personal access token (in the request header).
→The file key and node ID from the Figma URL you provided.

Figma's handling of this data is governed by Figma's own Privacy Policy. EasyQA is not affiliated with or endorsed by Figma, Inc.

No other third-party service, API, or server is contacted by this extension.

6. Chrome Permissions Explained

EasyQA requests only the permissions necessary for its core functionality.

Permission	Why it's needed
activeTab	To inject the QA toolbar into the tab you are currently viewing, when you click the extension icon.
scripting	To inject the toolbar UI and the screenshot capture script into the active tab.
storage	To save your Figma token and preferences locally in your browser.
tabs	To capture a screenshot of the visible tab for pixel-diff comparison.
windows	To create the side-by-side split view window layout.
contextMenus	To add the "Split Tabs" option to the extension's right-click menu.
system.display	To detect your monitor dimensions so split view windows are sized correctly on multi-monitor setups.

7. How to Delete Your Data

You have full control over all data stored by EasyQA. To delete everything:

1 Open Chrome and go to chrome://extensions
2 Find EasyQA and click Remove
3 All locally stored data (token, preferences, session) is permanently deleted.

Alternatively, you can clear the token without uninstalling by opening the EasyQA toolbar, navigating to the Figma setup panel, and clearing the token field.

8. Children's Privacy

EasyQA is a developer tool intended for adults. It is not directed at children under the age of 13, and we do not knowingly collect any information from children.

9. Changes to This Policy

If this privacy policy changes in a material way, we will update the "Last updated" date at the top of this page and increment the extension version. Continued use of EasyQA after a policy update constitutes acceptance of the revised policy.

10. Contact

✉️

If you have any questions about this Privacy Policy or how EasyQA handles your data, please reach out:

Developer: helloshams
LinkedIn: linkedin.com/in/helloshams

We aim to respond to all privacy inquiries within 5 business days.