Privacy policy
Last updated: September 25, 2026
In short. Rehead runs on your device. It does not collect your browsing history, page content, the headers you enter or usage statistics, and shows no ads. Only one piece of data can leave your device: your licence key, together with the device name you choose, and only if you activate the Pro version.
1. Data controller
Bryan Cellier EI, sole trader (entrepreneur individuel, France), SIREN 925286395, 48 boulevard de l'Europe, 69600 Oullins. Contact: bryan.cellier.pro@gmail.com.
2. Data processed only on your device
- Your profiles: the header names and values you enter (including any authentication tokens or cookies), domain filters and settings. They are saved in your browser's local extension storage. They are never synced or sent anywhere.
- HTTP requests: the extension does not read your requests, their responses or page content. It hands header-modification rules to the browser, which applies them itself to requests to the sites you allowed. The extension never receives the addresses you visit or the content exchanged. The browser may show on the extension icon how many requests were modified in the tab: this counter never leaves the browser.
- The address of the current tab, read only when you open the extension's window, to offer to allow this site or add it to a filter. It is neither saved nor sent, unless you add it to a profile yourself.
- Your licence status (key, activation identifier, check dates), kept on the device so that Pro keeps working offline.
- Export files, created when you ask for them: they contain your profiles, values included. Keep them safe.
We have no access to this data.
3. Site access
The extension has access to no site when installed. The browser asks for your consent, site by site, when you add a domain to a profile or turn a profile on. This access is only used to change the headers of requests to those sites. You can withdraw it at any time in your browser's extension settings.
4. Data sent if you activate Pro
| Data | Licence key, device name chosen by you (default: browser and activation date), activation identifier. |
|---|---|
| Recipient | Polar Software, Inc. ("Polar"), our reseller (Merchant of Record), which issues and verifies licences. |
| Purpose | Checking that the licence is valid and enforcing the number of devices included in the offer. |
| Frequency | On activation, then about once a day while you use the extension, and on deactivation. |
| Legal basis | Performance of the licence contract (Article 6(1)(b) GDPR). |
Purchases happen on Polar's checkout page: Polar collects your payment and billing details under its privacy policy. We never see your card details. Polar shares with us the information needed to track sales and provide support (email address, country, order, licence).
Polar is based in the United States: data transfers involved in a purchase or a licence check are covered by the safeguards described in Polar's privacy policy.
5. What we never do
- No selling or renting of data, no advertising, no profiling.
- No analytics, no cookies, no trackers in the extension.
- No code downloaded from the Internet: all code ships in the package reviewed by the extension stores.
6. Retention
- Local data: until you delete it or uninstall the extension; until you deactivate the licence for licence data.
- Data held by Polar: according to Polar's privacy policy and legal obligations.
- Support emails: three years after the last contact.
7. Your rights
You can ask to access, correct, delete or port your data, and you can restrict or object to its processing, by writing to bryan.cellier.pro@gmail.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with your local authority.
To remove the licence from a device, use the "Deactivate on this device" button in the extension settings, or your Polar customer portal. Uninstalling the extension deletes all local data.
8. Changes
Any change to this policy is dated above. If the extension ever processed new data, you would be informed in the extension before anything is sent.