TagFrog Inspector privacy policy

Last updated: 2026-10-28. Publisher: BlueFrogAnalytics LLC, an Oregon limited liability company (bluefroganalytics.com). Contact: privacy@bluefroganalytics.com.

Short version

TagFrog Inspector records only when you press Record, only in that tab, and keeps the recording on your computer. In this version no recording data is ever sent to BlueFrog or anyone else: no analytics about you, no account, no uploads. The only thing the extension loads from the internet is service logos (see below). Delete a recording and it is gone.

What is recorded, and when

Only between Record and Stop, and only in the tab you started it in. The page itself (replay, steps and screenshots) is recorded only while that tab shows the website you started on (pages of the same site). If the tab moves to another website during a recording, only that tab’s requests to the analytics and advertising services listed below are recorded, with a note that the page could not be read.

• Analytics and advertising requests the website sends to the services listed below, and to its own server-side tagging endpoint: the address, the data in the request (for example the event name, order ID and value a site sends to Google Analytics or Meta), request and response headers, status and timing.
• dataLayer, gtag and Shopify analytics events the website’s own scripts create, and consent changes it signals to Google tags.
• A replay of the page (rrweb): the page structure and how it changed, mouse movement and scrolling. Every form field value is masked (replaced by asterisks) before it is stored, so what you type into passwords, card numbers, email addresses and any other field is never recorded. You can also mask the text of any part of the page with a CSS selector in the popup settings. Stripe and PayPal payment frames are not recorded.
• Your steps: what you clicked (the element and its visible text), that you changed a field (only its length, never its value), form submits, scroll position and page loads.
• Screenshots of the visible tab when a page loads, when you click and when a tag fires (at most two per second). Screenshots show what is on screen, including anything you typed that is visible; turn them off in the popup settings if that matters for a site.

The recording is stored in the extension’s local database (IndexedDB) on your device. It stays until you delete it (popup or viewer, “All sessions”), or remove the extension.

What is sent anywhere

No recording data, in this version. The only requests the extension makes itself are for service logos: the popup, viewer and DevTools panel load icons such as https://bluefroganalytics.com/tech-icons/google-analytics.svg from our website (a plain image request, which like any web request carries your IP address and browser details; it contains nothing about the site you recorded). If that fails, bundled logos are used. Exports (HAR, JSON, HTML report) are files saved to your computer when you click an export button; what you do with them is up to you. Note that an export contains the recorded requests and, for JSON and HTML, screenshots.

The links “Fix tracking issues with TagFrog” and “Run a free tracking audit” open bluefroganalytics.com in a new tab with utm_source=inspector; the audit link includes the address of the site you recorded (its origin, e.g. https://shop.example.com). Opening a link is an ordinary visit to that website.

Permissions and why

• Access to the analytics and advertising services’ addresses (Google Analytics, Google Tag Manager, Google Ads, Meta, Microsoft Advertising, TikTok, Pinterest, LinkedIn, Snapchat, Reddit, X, Klaviyo, Hotjar, Microsoft Clarity, Segment) together with webRequest: to see the requests a website sends to those services while you record. The extension does not change or block them, and does not read your activity on those services’ own websites.
• activeTab: clicking the button gives access to the current tab only, for recording it.
• Access to the site you record (optional, asked when you press Record, one site at a time): lets the recorder start at the very beginning of every page load on that site and see the site’s own tagging endpoint. You can refuse or withdraw it in the browser’s extension settings; recording still works.
• scripting: to run the recorder in the recorded tab.
• storage: your settings (mask selector, screenshots on/off) and which tab is being recorded.
• Screen capture of the visible tab (part of activeTab): the screenshots described above.
• DevTools panel: when you open DevTools, the TagFrog tab reads the network log DevTools already shows you, on your device, to decode it; nothing is stored or sent.

Sale and sharing

We do not collect, sell or share data from this extension. The use of information received from the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

A future version may offer optional sharing of a recording through a link. It will be off unless you choose to share a specific recording, and this policy will be updated before that ships.

Contact

BlueFrogAnalytics LLC (Oregon), privacy@bluefroganalytics.com